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BY DAVID RUBINSTEIN 

Hoping to help software ven- 
dors maximize their profitabili- 
ty, Macrovision Corp. released 
on Feb. 23 its FLEXnet Pub- 
lisher, the first revision to the 
licensing system in 15 years, the 
company announced. 

"As hardware becomes com- 
moditized, software is where dif- 
ferences can lie and profits can 
be made," said Daniel Green- 
berg, Macrovision's vice presi- 
dent of marketing. Greenberg 
cited a report by McKinsey & 
Co., written in October 2003, 
that shows a 1 percent increase 
in price leads to a 7 percent 
increase in earnings. 

He said software publishers 



and vendors have got to get more 
creative in the way diey license 
their software — adopting more 
volume discounts, bundling less- 
requested software into a suite of 
products, and moving toward 
hybrid licensing schemes. 

"Different licensing mod- 
els," Greenberg said, "can 
expand the software life cycle. 
Sales were waning for [Micro- 
soft's] Word. Microsoft used 
licensing to bundle Word into 
Office, and they were able to 
reinvigorate sales." 

On the other side of that 

coin, Greenberg pointed to 

Adobe Photoshop. "Selling a 

$600 graphics package for peo- 

► continued on page 21 



OSDL Picks Up 
Enterprise 
Linux Mantle 

Open Source Development Labs 
carries on UnitedLinux effort 



BY EDWARD J. CORREIA 

UnitedLinux LLC, beset by lit- 
igation, acquisitions and hemi- 
spheric relocation, has called it 
quits, saying its mission to unify 
enterprise Linux is accom- 
plished, and referring calls to 
individual member companies. 
Meanwhile, the Open Source 
Development Labs appears to 
be picking up where UnitedLin- 
ux left off, with Paula Hunter, 
former general man- 
ager of UnitedLinux, 
leading the charge 
as OSDL's business 
development direc- 
tor. "There's a lot 
more flexibility in 
OSDLs model for 
adding new mem- 
bers and having 
more collaboration 
with technology and 
software partners," 
Hunter said, com- 
paring her current 




Hunter says OSDL is a 
true consortium. 



employer with her former. "The 
OSDL model is a true consor- 
tium and a place where collabo- 
ration can be much more open 
and not be encumbered by a 
rigid legal structure drat United- 
Linux was," she added. 

According to Hunter, her 
function at OSDL is similar to 
what it was at UnitedLinux: 
"My role is to go out and get 
end-user organizations more 
engaged in OSDL, 
not only in an advi- 
sory capacity, but 
also having end 
users on our techni- 
cal workgroup." 

OSDL in Febru- 
ary released Data 
Center Linux Tech- 
nical Capabilities 1.0, 
which details more 
than 300 features 
that the group agrees 
should be present in 
► continued on page 21 



J2SE 1.5 Preview 
Goes Into Beta 



BY YVONNE L. LEE 

Sun Microsystems Inc. in Feb- 
ruary released the beta of J2SE 
1.5 for public review, moving 
the latest version of desktop 
Java from a theoretical list of 
requirements and definitions to 
code that developers can down- 
load and test. 

The beta is the reference 
implementation for Java Specifi- 
cation Request (JSR) 176 and 
includes the Java Runtime Envi- 
ronment (JRE), the Software 
Developer Kit (SDK) and Doc- 
umentation. J2SE licensees also 
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have access to a 
beta version of the 
Testing Compatibil- 
ity Kit (TCK). 

The software is 
available for Linux, 
Solaris and Win- 
dows at Java. sun 
com. Roth binary According to Sun, its new Ocean interface has 
and source code are brighter colors, subtler gradients and fewer deco- 
available. rations than the previous Java interface. 

Sun announced 



the features of J2SE last June at 
JavaOne in San Francisco. At 
that time, the company said the 
features of the desktop Java 
platform would fall along the 
themes of ease of development; 
monitoring and management; 
reliability, availability and ser- 
viceability; and performance 
and scalability. 

The specification and virtual 
machine for Java 2 Standard 
Edition is distributed free from 



Sun, and form the basis for 
both the J2EE server platform 
and the J2ME mobile platform. 

Among the new features is 
support for generics. "It makes it 
easier and type-safe for people to 
use Java," said Calvin Austin, 
JSR 176 specification lead. 

Other ease-of-development 

features include support for 

metadata, enumerated types and 

enhanced for loops. These 

► continued on page 14 



OASIS SETS 
PATH TO 
'DATAWEB' 

Effort would link, 
synchronize data 

BY YVONNE L. LEE 

The Organization for the Ad- 
vancement of Structured Infor- 
mation Standards (OASIS) in 
February began the second 
phase of work on what it hopes 
will be a Web drat can not only 
link data, but also synchronize it. 

The new Web, which OASIS 
refers to as the "Dataweb," 
would provide a way to pub- 
lish/subscribe to information. 

"If you have an application 
today that you want to turn into 
a Web service — let's say 
accounting across a supply 
chain — you can design a Web 
service to do that, [but] if you 
► continued on page 20 
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W3C Releases 'Semantic Web' Specs 

RDF revision, ontology language written to help give context to data 



BY YVONNE L. LEE 

The World Wide Web Consor- 
tium in early February released 
two new specifications that it 
hopes will become the underpin- 
nings of a Web that not only links 
documents, but provides context 
for the data inside, as well. 

The new system, called the 
Semantic Web, is the brainchild 
of Tim Berners-Lee, creator of 
the World Wide Web. It is not a 
replacement for the existing 
Web, but would add new ways 
for categorizing information and 
classifying the relationship be- 
tween data objects on the Web, 
said Eric Miller, a research scien- 
tist at Massachusetts Institute of 
Technology and W3C Semantic 
Web activity lead. 

Today, documents are linked 
on the Web without any con- 
text. At its base level, the 
Semantic Web would facilitate 
more precise searches. Further, 
papers by Berners-Lee drew 



scenarios of agent software syn- 
chronizing schedules and find- 
ing appropriate appointment 
locations based on preferences 
of the involved parties. 

The Semantic Web is built of 
three components: the Besource 
Description Framework (BDF), 
Besource Description Frame- 
work Schema and the Web 
Ontology Language (OWL). 

"BDF is diis pretty simple 
model that facilitates how to 
combine XML data on the Web. 
BDF Schema provides die abili- 
ty to define vocabularies, such as 
title, subject, author and ZIP 
code," he said. "OWL builds on 
top of BDF Schema to provide 
even more expressive capabili- 
ty — for example, 'ZIP code' 
equals 'ZIP' " 

The two new specifications, 
both W3C Becommendations, 
are a revision oi BDF and the 
new ontology language. BDF is 
a set of rules for providing 



metadata, or simple descrip- 
tions of information. OWL lays 
out the interrelationship be- 
tween objects. Together, they 
are designed to provide a 
framework to manage assets, 
integrate data around an enter- 
prise, and allow for sharing and 
reuse of data on the Web. 

The BDF revision removes 
parts of the earlier specification 
that weren't used, clarifies 
unclear portions, and adds test 
cases as well as a primer for 
implementation . 

"If all the applications run 
through the test cases and pass 
where they're supposed to pass 
and fail where they're sup- 
posed to fail, you can pick up a 
Java toolkit, you can pick a Perl 
toolkit, you can pick up a C 
toolkit, and they will all pro- 
duce interoperable applica- 
tions," Miller said. "We're very 
much taking a test-case 
approach so that all these dif- 



ferent toolkits interoperate 
with one another," said Miller. 

The new specification clari- 
fies instructions that were 
ambiguous in the original rec- 
ommendation, originally final- 
ized in 1999. 

The BDF metadata, or sim- 
ple descriptions, enables infor- 
mation to be searched, just as 
providing information such as 
subject, author and title facili- 
tates finding a book in a library. 
BDF Schema then provides a 
way for those descriptions to be 
combined into a single vocabu- 
lary for a subject area. 

If BDF defines the rules, 
OWL — it sounded better than 
WOL, according to the W3C's 
Janet Daly — lays out die interre- 
lationship between objects. 

OWL will make fuzzier 
searches possible, Miller said. 
For example, he said, most 
search services today would 
not return "auto repair" in a 



search of "how to fix my car." 
With OWL, organizations could 
equate such concepts as "auto" 
and "car," and "repair" and "fix." 
Such linking could make it easi- 
er for organizations to tie inter- 
nal address books and similar 
records with overlapping but dif- 
ferently labeled fields, he said. 

While tying information 
together can make it easier to 
get information, it also brings 
up new questions of privacy 
and security. The W3C has 
added ways to add security 
information to Semantic Web 
files, said Miller. 

"I want to take pictures of my 
children and put them on the 
Web, but I don't want Google to 
index these," he said. 

Organizations could describe 
information with as little or as 
much detail as they choose, so 
using the specification will not 
necessarily be cumbersome, 
Miller said. I 
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For Test Automation zl 

SDT enhances functional test tool, creates 
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BY DAVID RUBINSTEIN 

Claiming to raise software test 
automation to a new level — 
while eliminating most scripts 
and thousands of lines of code 
along the way — Software Devel- 
opment Technologies last month 
released version 7 of its Unified 
Test Pro suite. The company 
also announced the availability 
of a new Software Test Transfor- 
mation suite, which combines 
professional services with many 
third-party requirements and 
configuration management and 
testing tools. 

Most companies still take "a 
sloppy approach" to testing, 
argued Edward Kit, CEO and 
founder of SDT, which has been 
developing the software since 
1992. "Without a high level of 
abstraction, [the testing process] 
will fundamentally fail." 

The capture/playback meth- 
od of creating tests, which 
Kit called "first-generation" test 
methodology, failed when appli- 
cations changed and the original 



set of test scripts had to basical- 
ly be trashed and the effort start- 
ed again from the beginning, he 
explained. Scripting tests also 
creates a headache when the 
application changes, because the 
scripts need to reflect those 
changes, leading to a situation 
where an organization is forced 
to keep straight the numerous 
test scripts and changes that go 
with each application, as well as 
to hold on to a tremendous 
amount of redundant script that 
tests the same functionality in 
multiple applications. 

SDT takes what it calls a key- 
word-driven approach to creat- 
ing functional tests, Kit 
explained. Using the Design- 
Bench tool in UTP 7.0, a test 
designer would define keywords, 
such as "inquire on flights" for an 
airline reservation application. 
This would have parameters 
such as date and departure city 
associated with it. 

Then, using the BuildBench 
feature, a test builder would 




work through the 
tabs, look at the data- 
base where the infor- 
mation is stored, and 
map the parameters 
to the data objects. 
Users then create test 
cases from the key- 
words — via an auto- 
matic code genera- 
tor — and assemble 
test sets from the test 
cases, he said. The 
automatic implemen- 
tation of these prede- 
fined keywords into The BuildBench feature helps users work through 
test cases, which are keyword tabs and map parameters to data objects. 
GUI- and platform- 
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independent, is a new feature in 
UTP 7.0, Kit added. 

One advantage of this key- 
word approach is that the key- 
words are reusable, and can 
be recombined in different 
ways to create different test 
sets for different applications, 
Kit said. This helps organiza- 
tions get rid of the thousands 
of lines of redundant script 



they store for each application 
they write, he said. 

UTP 7.0 was designed for 
use by nontechnical people 
with knowledge of the business 
process to design the tests while 
technical testers work with the 
keywords to be implemented, 
Kit explained. This role-based 
structure reduces an organiza- 
tion's costs by cutting down on 



the number of technical people 
required to implement this type 
of functional testing. 

The new Software Test 
Transformation suite comes 
into play in organizations that 
are looking to completely make 
over the way they do testing, 
Kit said. It involves providing 
training for people using the 
suite, establishing an organiza- 
tion in which roles are clearly 
defined, giving access to ade- 
quate test automation tools, and 
a defined methodology that 
integrates with the software 
development process and test 
automation, he continued. 

The methodology SDT uses 
is called Software Testing in the 
Beal World, which also happens 
to be the name of a book writ- 
ten by Kit and published in 
1995. SDT has agreements with 
most of the major testing tools 
vendors to resell those products 
in the solution sets it creates, he 
claimed. 

UTP 7.0 costs US$6,495 
per seat wiuh a slightly higher 
price tag on a concurrent-user 
basis, while the Software Test 
Transformation suite begins at 
$500,000 and includes SDT's 
test methodologies and test 
courses, the UTP and Beview- 
Pro test tools and services, 
which could involve putting four 
to 10 consultants on-site for a 
period of months, he said. I 
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Solaris 10 Sports Admin Features, Better Uptime 



BY YVONNE L. LEE 

More precise administration 
capabilities and higher applica- 
tion uptime will mark the 
Solaris 10 operating system that 
Sun Microsystems Inc. will ship 



in the fourth quarter, the com- 
pany said in a February briefing. 
New grid containers, predic- 
tive self-healing technologies, 
process rights management 
technology and dynamic tracing 



are scheduled to be included in 
the release. 

The Nl Grid containers 
make it possible to section off a 
computers processing capabili- 
ties according to workload 



needs, said Bill Moffitt, group 
manager for Solaris product 
management. 

"It's a system virtualization 
capability that's entirely in soft- 
ware," Moffitt said. "You can 
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subdivide even a one-CPU sys- 
tem. Using Nl Grid containers, 
it means you can run 80 percent 
of the workstation for your 
interactive tasks and 20 percent 
to your grid, and when you go 
home at night, you can switch 
those. You don't have to move 
software between actual boxes 
to move the workload. The idea 
with the grid is you can have 
the servers there, and you just 
move the work around to the 
servers that can do it." 

Predictive self-healing looks 
at faults that aren't yet causing 
crashes and determines pat- 
terns that could lead to a fail- 
ure. It uses a layer of software 
between the hardware and the 
kernel that can monitor faults 
and seek to rectify faults before 
they happen by taking proces- 
sors and memory off the system 
before they actually go bad. 

In addition, according to 
Moffitt, when a failure does 
occur, process rights manage- 
ment software can understand 
which applications are affected 
by a failure and ensure that only 
those applications fail and then 
restart them automatically. It 
also prevents a hacked applica- 
tion from gaining extra abilities 
or corrupting the entire system. 

Moffitt claimed that Solaris 
10 will have more than 30,000 
trace points and a scriptable 
control panel to track them. 
Sun claims the dynamic tracing 
can greatly enhance system 
performance. "If you want to do 
this kind of tracing [today], you 
have to run a special kernel," 
Moffitt said. "With dynamic 
tracing, you will be able to go 
out and look at your system 
while it's running. You won't 
have to reboot it; you won't 
have to run a special kernel." 

Sun will roll out the changes 
over the course of the year 
through its Software Express 
subscription program, but the 
full version of Solaris 10 is due in 
the fourth quarter, Moffitt said. 

Sun has been using its Soft- 
ware Express to roll out addi- 
tions — including new fea- 
tures — into Solaris since 
September. For example, Sun 
added Sun ONE application 
server and directory server 
middleware in the December 
2003 Software Express release. 
Moffitt said the company does 
not plan to roll additional Sun 
ONE middleware into the 
Solaris operating system. I 
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Trolltech Strengthens Its Embrace of .NET 

Claims Qt 3.3 GUI tools will ease transition from native Windows to runtime 



BY EDWARD J. CORREIA 

GUI tools developer Trolltech 
AB is tackling the problem of 
porting native Qt-based Win- 
dows applications to .NET with 
Qt 3.3, the latest version of its 
cross-platform widget libraries, 
released in February. 

"We try to insulate program- 
mers from disruptions and 
changes in the industry," said 
Trolltech CEO Haavard Nord, 
adding that while .NET sup- 
port was technically available in 
Qt since version 3.1 was 
released last summer, version 
3.3 does more heavy lifting. 
"Earlier, some very experi- 
enced programmers could use 
Qt to create .NET compo- 
nents, but it required lots of 
manual coding. Now we've 
made it much easier; this is the 
first time we have real interop- 
erability with .NET" 

ACTIVEQT IMPROVEMENTS 

The main enhancements come 
in ActiveQt, a framework that 
lets Qt apps use Microsoft's 
ActiveX controls, make Qt apps 
available as ActiveX servers and 
Qt widgets available as ActiveX 
controls. "It is now possible to 
take Qt widgets or parts of Qt 
applications you create and 
package and utilize them in a 
.NET application," Nord said, 
meaning that all or part of a 
.NET application can be writ- 
ten in Qt. "They don't have to 
rewrite everything using C#." 

Further, two new ActiveQt 
classes permit developers to 
script COM objects within Qt 
applications using Windows 
Script Host, and two new func- 
tions allow Qt apps to start and 
stop ActiveQt servers at run- 
time. Drivers have been added 
for the SQLite in-process data- 
base, Interbase, and Firebird, 
the open-source version of 
Interbase. 

The software from the Nor- 
wegian company now supports 
semi-transparent top-level wid- 
gets for Mac OS X and Win- 
dows XP/2000 with varying 
opacity, and also works with 
IPv6, according to Nord. 

Qt 3.3 also now supports 
64-bit machines running Lin- 
ux, Mac OS X and Windows. 
"Sixty-four-bit is becoming 
much more important in the 
desktop platform," said Nord, 
"because people are dealing 
with huge amounts of data and 



reaching the limits oi 32-bit 
processing." For them, he said, 
32-bit apps can run unchanged 
on Itanium or G5 processors 
with a 64-bit recompile. 



The software is available 
now for US$1,550 per devel- 
oper seat; there are no run- 
time charges. The tools also 
are available free for noncom- 



mercial use, but ActiveQt is 
not included. 

Nord said only Microsoft's 
runtime is currently support- 
ed, but he did not rule out 



the possibility of supporting 
the Mono and Portable.NET 
open-source projects at some 
time in the future "if those 
projects gain momentum." I 
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KnowNow Inc., which offers publish/subscribe tools, and General 
Interface Corp., which provides rich-client software than runs in a 
browser, will integrate their technologies to add new browser-based 
features to the KnowNow 2 Event Routing Platform . . . Microsoft 
Corp. has chosen to delay changes to Windows and Internet Explorer 
mandated by the Eolas Technologies Inc. patent lawsuit, despite the 
jury decision in August 2003. The company had announced in October 
that Windows XP Service Pack 2 would change IE to eliminate code 
covered by the patent, which covers embedding and invoking executa- 
bles by Web pages. Microsoft says that the patent may be ruled invalid 
by the patent office . . . Blue Titan Software Inc., maker of Network 
Director, an SOA management system, and DataPower Technology 
Inc., which sells the XS40 SML Security Gateway appliance, will be 
combining the two into a single SOAP networking system . . . Softwrap 

- — — Ltd. has reduced the service fees for Softwrap, its 

l" software licensing platform. The new fees range 
from 18 percent for software priced under US$20, 
to 16 percent for software priced over $150. The 
Softwrap model has customers paying the company for unlocking 
downloaded software; Softwrap passes the retail price, less the service 
fee, to the software author. 



, PRODUCTS , 




Accelerated Technology, a division of Mentor Graphics Corp., now has 
a version of its Microtec C/C++ compiler for Motorola's ColdFire 
embedded processors. Pricing starts at US$2,400 per seat . . . The 
newest version of BEA Systems Inc.'s JRockit J2SE virtual machine 
has simplified configuration via automatic and dynamic tuning 
designed to match the needs of each particular application. Version 
1.4.2 also has enhanced management and monitoring capability 
designed for improved operations productivity . . . theKompany.com 
has released BlackAdder 1.0, a GUI for Python based 
on Qt, the application framework from Trolltech. 
BlackAdder, which runs on Linux and Windows, 
includes a debugger, syntax highlighting in the editor ^KOMPANV— 
and ODBC extensions for Python. It also supports CSV. The software 
costs US$399.99 . . . Softlntegration Inc. has updated its Ch and 
Embedded Ch C/C++ interpreters. Version 4.5 of the products add file 
name completion using a tab key in a command shell, easier interface 
with binary C/C++ libraries and embedded scripting, and bug fixes . . . 
Newmerix Corp., a start-up based in Superior, Colo., has released 
Automate, a program management, testing and change management 
suite for PeopleSoft application developers. The company intends to 
release versions of the product for SAP, Siebel and Oracle in the future 
. . . TIBCO Software Inc. has ported its Java messaging software, TIB- 
CO Enterprise for JMS, to Linux on the Itanium 2 processor . . . 
Actional Corp. is now offering a set of Web services management and 
SOA components for BEA's WebLogic Workshop . . . Version 3.1 of the 
Embarcadero Job Scheduler, from Embarcadero Technologies Inc., 
now supports IBM's DB2 on Linux, Unix and Windows, and also allows 
the migration of Cron jobs from Linux and Unix. It also has a visual job- 
set editor . . . Candle Corp. has updated its PathWAI Monitor for Web- 
Sphere MQ, a performance manager for IBM's middleware. Version 110 
adds a browser-based optimization interface, expanded configuration 
capabilities for complex issues, new gueue statistics for analyzing sys- 
| |H<— 11^ tern health, and expanded message statistics for 
"^- J ** HJ.lt providing visibility into distributed environments. 
The software runs on Linux, OS/390, OS/400, Unix, Windows and z/OS; 
pricing begins at US$14,250, which includes installation and training 
. . . Thought Inc. has updated its CocoBase Enterprise 0/R object- 
relational mapping software. Version 4.5 service release 5 adds an 
application model verification wizard and a stored procedure mapping 
wizard . . . NuSphere Corp. has several product updates. PhpED IDE 
3.3 for Windows, its PHP development environment, now includes 
PHP document capability and a Web services wizard, and supports 
PostgreSQL and MySQL natively. UltraSQL 1.0.6 for Windows, a Post- 
greSOL-compliant database, now has native interfaces for ODBC, 
C/C++ and PHP. And TechPlat- 



Logidex Brings Asset 
Management to XDE 

Plug-in for IBM's Rational environment based on 
Reusable Asset Specification advancing through OMG 



BY DAVID RUBINSTEIN 

Last month, Logic Library Inc. 
released version 3.0 of its 
Logidex for J2EE asset reposi- 
tory. New to this release is a 
Reusable Asset Specification- 
compliant plug-in for IBM's 
Rational XDE modeling envi- 
ronment. 

"We already had tight inte- 
gration with WebSphere Appli- 
cation Developer, and the same 
plug-in allows developers to 
stay in their IDE to consume 
RAS packages," said Alan Him- 
ler, Logic Library's vice presi- 
dent of product management. 
The specification has recently 
completed a 90-day comment 
period at Object Management 
Group, which is shepherding 
RAS. The specification should 
be on track for finalization by 
OMG's board of directors by 
July. The plug-in allows assets 
to be brought into the XDE 
environment and then repre- 
sented in a UML model, 
according to Himler. 

Other new features in 
Logidex for J2EE 3.0 include 
the ability to use LDAP for 
authentication and authoriza- 
tion inside the Logidex applica- 
tion, Himler said. 

Also, Logidex 3.0 allows for 










Logidex lets developers import RAS assets and save them to a repository. 



the creation and control of fed- 
erated libraries. "This allows 
libraries to become visible to 
other libraries," Himler ex- 
plained. "Now you can create 
outsource libraries and main- 
tain control with the adminis- 
trative capabilities built into the 
product." Logidex can enable 
the creation of cached libraries 
for fast searches even as the 
asset metadata resides in a 
remote library. 

The other major feature of 
the new release, Himler said, is 



the inclusion of an asset acqui- 
sition justification document 
within new native workflow 
capabilities. Developers must 
answer how the asset will be 
used, and if it's appropriate for 
any applicable licensing terms, 
before including the code in the 
project. "It puts more require- 
ments around asset acquisi- 
tion," he said. 

A pilot program of Logidex 
3.0 for J2EE begins at 
US$35,000; an installation for 
75 users begins at $90,000. I 



Novell's BrainShare Returns to Mainstream 



BY ALAN ZEICHICK 

Once a key annual event for 
network administrators and oth- 
er enterprise IT professionals, 
Novell Inc.'s BrainShare confer- 
ence lost influence in the 1990s 
as NetWare faded from promi- 
nence. Yet with Novell's high- 
profile stance on Linux, and its 
acquisitions of Ximian and 
SUSE, BrainShare 2004 promis- 
es to become much more impor- 
tant to software developers and 
development managers. 

Scheduled for mid-March in 
Salt Lake City, the confer- 
ence — which carries a tuition of 
US$1,795 per attendee— will be 
divided between the company's 
two network operating systems, 
NetWare 6.5 and SUSE Linux, 
as well as Nterprise, Novell's 
Linux applications stack, and 



Extend, its J2EE app server. 

Within the program, there 
will be 154 technical tutorials, 
38 developer lectures and 26 
hands-on development ses- 
sions, as of press time. How- 
ever, a month out from the 
event, Novell hadn't completed 
the program. 

Odier topics on the program 
include a session on developing 
and deploying .NET applications 
on Linux using Mono, the open- 
source implementation of the 
.NET Framework; an overview 
of Extend 5.0; and sessions on 
migrating from Windows to 
SUSE Linux. There are also 
systems administrator- focused 
sessions on NetWare and Nov- 
ell's other applications, includ- 
ing messaging and directoiy 
management. I 



BRAINSHARE 2004 

CONFERENCE: March 21-26 
The Salt Palace, Salt Lake City 



EXHIBIT HOURS: 
Sunday, 2 p.m.-6 p.m. 
Monday, 10:30 a.m-6 p.m. 
Tuesday, 10:30 a.m. -10 p.m. 
Wednesday, 10:30 a.m.-6 p.m. 

CLASSES: 

Monday, 11 a.m. -6 p.m. 
Tuesday, 8:30 a.m. -6:15 p.m. 
Wednesday, 11 a.m. -6 p.m. 
Thursday, 8:30 a.m.-6:15 p.m. 
Friday, 11 a.m.-4:30 p.m. 

GENERAL SESSIONS: 
Monday, 9 a.m. -10:45 a.m. 
Wednesday, 9 a.m.-10:45 a.m. 
Friday, 9 a.m.-10:45 a.m. 

www.novell.com/brainshare 
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Developers love creating code,,. 
Managers crave process control. 
Bridge the gap with Seapine CM 

Software development is a team eFfort wifh developers, testers, 
and management all working toward one goal — delivering the 
highest quality product on lime. 



Seapine CM brings structure to source control and issue 
management improving communication while accelerating 
product development. 

Seapine CM helps your team,,. 

Define custom change request workflows, puffing you in canttn) 
of who makes changes and who authorizes- tfte closure of issues 

Associate source code changes with defects or change requests. 



fm a thorough understanding of how much work remains 



before project completion. 

View complete audit trails of what changed? why, and by whom. 

Understand how close you are to release— how many issues are open, 
how quickly are you closing them f how many are re-opened? 

Successful team-based development requires the proper process 
supported by the right development tools. Tools that are 
Flexible, easy \o use, secure, and scalable— like Seapine Crv\. 



Features: 
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with prwaie wwfcsrwjea, 
aiitortialc mftrgusg. reJe based 
security and mam. 

Compfehftnsi™ defect 
*rnna£jemem— Eracifc change 
requests, bug sports, toaturs 
inquests ard mare. 

Fast ard secun remote access 
to your source files end detects 

— Wflwit Irprtl onywhofB 

IDE imognKlon with JBuildv, 
V'SU-ii Studio, Eclipse, and Qfhgr 
ip.ad nq deuelopmanl roois 

Advanced nrarwming, triggers, 
■mad i-KKHicaiioiia, roiir 
^onlig-uriiWe workflows, and 
customizable fields f>.jl you in 
«mpicte ocniml cf your 
process. 

Open interfaces— friggem, email 
nalHicadons, SOAP Fiuppoit, 
XML data ewetarigq, and ODBC 
clients. 

Scalable ard reliable eaqsh 
pWtipmi, Glifintfserver aoluUon 
auppona Windows. Lmu«. 



Achieve major improvements in software development performance through 
better tool integration and process automation. Manage defects, 
development issues, and change requests with award-winning TestTrack Pro 
and gain complete control over your source code and change process with 
Surround SCM, Seapine's integrated change management tools are feature 
rich, highly scalable, Web enabled, and cross platform. Streamline your 
development process wilh Seapine CM and haFp your team deliver quality 
software products on time, every time. 
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First of IBM's Business-Specific Software Hits Market 



BY JENNIFER DEJONG 

Delivering on its promise to 
begin tailoring software solutions 
to specific industries, IBM Corp. 
announced last month the avail- 
ability of its middleware software 
for customers in banking, finan- 
cial markets and insurance. 

Based on the company's 
WebSphere application server, 
DB2 database, as well as IBM's 
Lotus, Tivoli and Rational prod- 
ucts, the offering also includes 
industry-specific applications 
from independent software 
vendors (ISVs) and services and 
support from IBM, said Leslie 
Givens, IBM's program director 
for developer relations. 

"In the past, we have gone to 
market product by product," 
she said. "But today customers 
are not thinking in terms of 
buying a J2EE application serv- 
er alone. They want software 
that automates and manages 
the business processes that are 
unique to their industry," said 
Givens. "The buying decision is 
applications-centric; infrastruc- 
ture is secondary." 

To deliver business-specific 



applications, IBM is partnering 
not just with large ISVs, such as 
SAP AG and PeopleSoft Inc., 
with which it has long-standing 
alliances, but also with small 
companies, such as ZipLip Inc., 
in Mountain View, Calif. 

ZipLip's Unified Email 
Archival Suite helps companies 
in financial services comply 
with U.S. Security and Ex- 
change Commission rules gov- 
erning the retention of elec- 



tronic documents, said Stephen 
Chan, ZipLip's vice president 
for business development. "Our 
software searches for and finds 
that information intelligently," 
he said. 

The IBM alliance enables 
ZipLip to gain entrance to cor- 
porate customers it might oth- 
erwise have difficulty reaching, 
and frees ZipLip from having to 
customize its software to work 
with the customer's infrastruc- 



ture. We can focus on keeping 
our software up to date and 
"leave the middleware to IBM," 
said Chan. 

While the alliances potential- 
ly benefit both parties, "IBM 
could alienate ISV partners if its 
vertical middleware pushes into 
areas that ISVs consider to be 
within the dominion of their 
own applications," said Summit 
Strategies analyst Dwight Davis. 

IBM's financial services 



offering is part of a larger strate- 
gy announced late last year to 
shift the majority of the compa- 
ny's investments and resources 
to industry-specific software 
solutions. Throughout 2004, 
IBM will roll out solutions for 
electronics, automotive, retail/ 
wholesale, consumer packaged 
goods, health care, govern- 
ment, life sciences, utilities and 
telecommunications markets, 
an IBM spokesperson said. I 



MICROSOFT IMPROVES PROTOCOL LICENSING PROGRAM 



BY JENNIFER DEJONG 

Microsoft Corp. announced in 
late January that it will make 
additional improvements to its 
communications protocol licens- 
ing program, making approxi- 
mately 20 protocols available 
free of charge and providing a 
new royalty model for others. 

Microsoft's Communica- 
tions Protocol Program allows 
third-party developers to ob- 
tain licenses to use Microsoft 
protocols in their own server 
products to improve interoper- 



ability with Windows. First 
released in August 2002, the 
program was established to 
comply with the final judgment 
of the antitrust case that the 
U.S. Department of Justice and 
a number of state attorneys 
general filed against Microsoft. 
Under the program, Micro- 
soft provides access to proto- 
cols used to carry out specific 
server tasks across a network. 
According to Microsoft's Jan. 
23 announcement, in addition 
to the approximately 20 proto- 



cols it is making available on 
its developer Web site free of 
charge, the company is offer- 
ing a new royalty model for six 
server tasks: Microsoft will 
license the proxy/firewall task 
for a flat fee; for five other 
tasks — collaboration server, 
multiplayer games, print/fax 
server, VPN and Web server — 
the license will be based on a 
flat, per-unit fee. 

These changes build on earli- 
er changes announced in August 
2003, which reduced royalty 



prepayments and offered an 
extended payment plan for 
smaller companies. 

According to the announce- 
ment, the new licensing terms, 
available on members. microsoft 
.com/consent/info, make it easi- 
er to do business with Micro- 
soft. For example, the actual 
agreement is shorter, and the 
terms eliminate Microsoft's right 
to audit licensees' end users. 

To date, only 11 companies 
have licensed the communica- 
tions protocols. I 
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Pantero SDS Suite: Not a Pure-Play SOA 

Shared Data Services goes better with BEA developer tools, company claims 



BY EDWARD J. CORREIA 

With a plan to compete in the 
already saturated enterprise 
integration market by bucking 
the pure-play trend, Pantero 
Corp. in mid-February re- 
leased Shared Data Services 
(SDS) Suite, a service-orient- 
ed architecture (SOA) tool set 
and server that it claims is 
more effective than tools from 
major integration vendors 
because it works more closely 
with enterprise application 
development tools. 

"We're following a trend 
away from [dedicated] integra- 
tion players like WebMethods, 
TIBCO and SeeBeyond," said 
Pantero CEO Pano Anthos. 
Instead, the Waltham, Mass.- 
based start-up is attaching 
its products to application 
platforms from BEA, IBM 
and Microsoft, "which are in- 
tegrating both development 
and integration environments 
together." SDS will initially 
work with BEA's WebLogic; a 
WebSphere edition is planned 
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Pantero's WebLogic Workshop plug-in adds integration capabilities. 



for later this year. 

SDS consists of two main 
components: the design envi- 
ronment, which is a plug-in to 
WebLogic Workshop IDE; and 
a runtime engine, which exe- 
cutes as a Web service within 
the BEA framework. 

According to Larry Alston, 
vice president of products, the 
advantage of such a configura- 
tion is that no new develop- 



ment can ever happen that 
does not integrate legacy sys- 
tems. "BEA, IBM and Micro- 
soft are presenting one environ- 
ment for building IT systems, 
and are doing that because the 
reality is that nobody builds 
green-field applications any- 
more; everybody is leveraging 
existing IT and data assets and 
enterprise systems to build 
applications." 



The engine works, 
Alston explained, by 
compiling a metadata 
repository that stores 
rules governing how 
application data should 
interoperate across an 
SOA, benefiting the 
enterprise by allowing 
applications to quickly 
respond to changes in 
business requirements 
• or data integrity rules, 
he said. "We're working 
with a mortgage compa- 
ny that has a rule that 
does not allow anybody 
over 80 years old to get 
a mortgage. If they want to 
raise or lower that age limit, 
they only have to deploy that 
rule to the metadata reposito- 
ry, and it would dynamically 
pick it up and apply it across an 
entire network." 

Changing such a rule manu- 
ally, Alston said, would involve 
not only the code changes 
themselves, but also "finding 
all the places in code that have 



to change, which are imple- 
mented in four or five major 
systems across many different 
services. They would have to 
find them first, change that 
rule, redeploy it and hopefully 
do it consistently across all the 
systems." And because no rule 
is an island, "then they need to 
test all the other interactions 
that go along with that rule," 
added Anthos. 

Anthos claimed a potential 
synergy between Pantero and 
major integration vendors, 
all of which he said have 
acknowledged a huge gap in 
their current architecture 
when it comes to data interop- 
erability between apps. "By 
providing an extension to each 
of these application platforms, 
we're in cooperation [with 
those vendors], and not in 
competition." 

Pantero's Shared Data Ser- 
vices Suite is available now; 
prices start at US$40,000 per 
server processor plus $3,000 
per developer seat. I 
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MKS Updates Integrity SCM Solution With Open API 



BY JENNIFER DEJONG 

In an ongoing effort to extend 
its software configuration man- 
agement tool across the enter- 
prise, MKS Inc., in Waterloo, 
Ontario, was expected to 
announce this month the avail- 
ability of version 4.6 of its MKS 
Integrity Solution. 

New to 4.6 is support for an 
open API, which makes it eas- 
ier to connect a software con- 
figuration management repos- 
itory with help-desk and 
call-center applications; a 
change package review fea- 
ture, which lets development 
managers accept or reject 
code changes before commit- 
ting them to the repository; 
and the ability to integrate 
Integrity Solution with IBM 
zSeries mainframes that run 
Computer Associates' change 
management tool AllFusion 
Endevor, said Dave Martin, 
MKS' vice president of prod- 
uct management. 

He noted that these features 
further enable developers to 
manage all development pro- 
jects across the enterprise from 



a single vantage point. "When 
many developers collaborate, 
and information is stored in 
more than one repository, the 
left hand doesn't know what the 
right hand is doing," he said. 

Version 4.6 also includes an 
updated, Outlook-style drag- 
and-drop interface and two 
process templates that map out 
the workflow for two popular 
development models, waterfall 
and iterative. 

API support saves develop- 



ers from writing custom code 
to link help-desk or call-center 
applications to the software 
configuration management re- 
pository. This is important be- 
cause help-desk applications 
and repositories often need to 
share information pertaining to 
software bugs and fixes. 

The ability to accept or 
reject code changes enables 
development managers to en- 
force a standard review pro- 
cess. "For example, a manager 



might discover that a program- 
mer snuck in a feature that 
wasn't planned for," said Mar- 
tin. When a manager rejects a 
change, the system alerts the 
programmer by e-mail, he 
added. "The programmer can 
then go back into the system to 
see why." 

MKS Integrity Solution in- 
cludes MKS Source Integrity 
Enterprise and MKS Integrity 
Manager. Sold separately, each 
costs US$1,000 per named user. 



MKS Integrity Solution costs 
$1,800 per named user. 

The 4.6 upgrade is available 
free of charge to customers on 
current maintenance plans. 
Upgrade pricing for nonmain- 
tenance customers is 50 per- 
cent of the list price for the 
product line. Maintenance 
plans typically cost 20 percent 
of the software list price. MKS 
Integrity Solution requires 
MKS Integrity Server, which 
costs $8,000. I 



IBM Previews Flex Plug-In on alphaWorks 



BY JENNIFER DEJONG 

IBM Corp. has made a technol- 
ogy preview of a Macromedia 
Flex plug-in for WebSphere 
Studio available on its alpha- 
Works Web site. 

The plug-in allows Java 
developers to create, edit and 
debug Flex applications in 
WebSphere Studio, said David 
Boloker, IBM's CTO of emerg- 
ing technologies. 

"What this is about is a visual, 
rapid development environment 



for building the presentation tier 
of Bich Internet Applications 
[BIA]," said Boloker. 

Boloker said the term BIA 
is used by Macromedia Inc. 
and IBM, among others, to 
describe a new breed of appli- 
cations that rely on client-side 
intelligence to carry out sim- 
ple transactions instead of 
making multiple round trips to 
the server. 

As the Internet matures, 
users are losing patience with 



Web applications that are 
forced to interact with a back- 
end server for each function 
that an application carries out, 
Boloker noted. 

Macromedia Flex technolo- 
gy, available only in a beta ver- 
sion until the middle oi this 
year, addresses that problem 
using server software and an 
XML-based scripting language 
that can call remote Web ser- 
vices, EJBs and other Java 
objects. Macromedia is ex- 



pected to create a Microsoft 
.NET version of the software 
in the future. 

The plug-in, available from 
www. alphaworks . ibm . com/tech 
/wsadflex, allows WebSphere 
Studio developers to create 
Flex applications without hav- 
ing to leave the environment 
they are accustomed to working 
in, said Boloker. 

Boloker said the plug-in is 
likely to become part of Web- 
Sphere Studio. I 
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Software FX gets a taste of its own medicine 

Self implementation increases understanding of customer needs 
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Eclipse Establishes Three Governing Councils 



BY JENNIFER DEJONG 

The newly independent Eclipse 
Foundation will be governed by 
three councils that will help 
structure the group's efforts 
across the open-source and 
commercial communities, it 



announced last month. 

According to Eclipse spokes- 
person Skip McGaughey, 
the requirements council cap- 
tures and classifies all incoming 
requirements from Eclipse 
members and produces a set of 



themes and priorities that drive 
the overall road map. The road 
map is "a predictable technology 
plan that commercial vendors 
and open-source teams can 
build on top of," he said. 

The planning council pro- 



duces the Eclipse road map 
and establishes a coordinated 
platform release plan, Mc- 
Gaughey said. 

The architectural council is 
responsible for development, 
articulation and maintenance of 



Cross Trainer Software. 
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Nigh-vafue., high-performance data infrastructure software for high-powered applications. 









To win :he rE.ce, ycv\ need robus - ., intagretec ao.DlEatio r s 
that -elp your custodiers' businesses- nr smoothly. 

Ana J or those, you neec sophisticated dale infrastructure 
software thai offers e"1erpnEe-leral raliatxity. security 
end flexibility. Big, fat products thai take a big. tat budget 
:o : „y. :■_ <: c- :r ]t:. -". - 

Dcn"1 -ave that k n c of budget? No oiootem. 

Pervasive gives yau 1he data infrastructure software 
yo^ read - powerful, reliable, secure - cost-erleclivaly. 
Feature-ric soluto r a ye can use to delve' tre agile, 
flexible B-"d rr- JtipletlDrT™ aoolcatio r s ycvf cuatorne- r s 
derrand. 



Win with Pervasive. 

Find out how at 

pervasive, com/noprohfem 

or at 888.296.5305. 
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Data irtegraHon Pervasive Data JuncJan" products give 
yo-rapo cato r 9 eny-'o-any integratjcn lunclicna ty wth 
e oorpete set of tools far date, rrapp. -g . :rs-sfcrma:kin 
Bnd process- management. 

Dubabase; EnDedcable Pe"VEsrve.SC'_" contnes 
performance and near- g.'ts-Dut administration in a 
pcweiul, flaxib'a and scalable database engine. 

Real- time monrtonn-n: Pervasive Auorr/a&ter ' prcvKies 
outing-edge :ra"sactiori intelligence, wi:h rea -t Tie 
mentoring c' data access ana auc- mails ot'rtho c a 
wha:. when, where ana how. 
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Eclipse platform architecture, 
said McGaughey. It will provide 
explicit descriptions of the 
architecture to all development 
teams and is also responsible 
for protecting the architecture 
from inadvertent corruption. 

Each council includes repre- 
sentatives from various mem- 
bership groups within Eclipse. 

The Eclipse Foundation is 
expected to announce the 
appointment of an executive 
director in late March or early 
April. McGaughey said Eclipse 
is currently interviewing candi- 
dates, none of whom is from 
IBM or any member company. I 



J2SE 1.5 



4 continued from page 1 

changes to the Java language 
itseli come from individual Java 
expert groups, and combined, 
Austin said, the APIs make up 
the most comprehensive update 
to the Java language since 1996. 
According to Austin, more than 
100 language changes are in 
J2SE. The most significant are 
JSR 14, adding generic types, 
JSR 175, adding a metadata 
facility, and JSR 201, extending 
the language with enumerations, 
autoboxing, for loops and static 
importing, he said. Autoboxing 
is automatic conversion from 
primitive types to their corre- 
sponding reference type wrap- 
pers. It makes it easier to inte- 
grate generics into the language, 
according to the expert group. 

"Some of the look and feel of 
Java was from the last century. 
We have a whole new look and 
feel called Ocean," said Austin. 
The platform has a skinnable 
API so developers can customize 
applications' appearance. It also 
can use the native features of the 
operating system on which it is 
running. By using features in the 
skinnable API, developers can 
create interfaces that are more 
accessible, Austin said. 

A technology compatibility kit 
for J2SE is available now for Java 
licensees — that is, other vendors 
who wish to build uieir own J2SE- 
compatible virtual machines. 

The platform is scheduled for 
general availability probably 
around August or September, 
said Sun's product line manager 
for J2SE, Karen Shipe. J2SE 
forms the basis for the J2EE 
server platform, the next revision 
of which should follow J2SE 1.5's 
general availability by about 12 
months, she said. I 




Preventing Errors 
Through Defect Tracking 

H ave you ever co-aider-ec uaing a de J sct 
t r ac*ing BysteTi aa an error prevention :o:> 'I 
He's <s what you can do to :-event ttia sana 
errors J ron "e-cccumng In youraohwara 
Itfacyda: 

W'h ever/ release of a new Drocuct. use- a 
delec: tracking s.y&:en 1d reccd a ot the 
arrora :h£t ware reported. Than analyze 
fese errors and construct a Iib: Fiat groups 
Hie detects into sim ar categories By 
grauo'-glhsrr, you will be able "o fnd a n y 
coTialBbcfiEi between tha errors. 

YV-en you fro a comalHtiafi, varrfy wecher 
ar not the rooi cauae of the e'^cre ongra^ed 
fern t r e sarre place. The shots you tind 
may or may not have the -sane roo: ca-se. 
Psgardlass, you should be able Id locate 
fe oo ^s " your software Irlecycle at whicti 
fese errors occurred, a-o you s-ould aso 
ba able bo determ 'e the exact cause o1 
t-esesmila' errors. 

Aher Irxat-g and determ -mg the ca.ae of 
your store you will ba able to Irnplerren" 
preventative practHxe Enal wr Kaap you ftoni 
rraking the sarre mi&-.aKB£ ov&r and ovar 
again. Give 1hi& procedure a trya-c see r 
it worts io T you. You should see a significant 
raducton ol e Tort in Fa next release ot your 
product. 

By the way, 1he procedure ce&cnbed above 
is a L^dame-Tal part or RamEct's Automated 
Eiror PraveMion (AEP> rre^hodocgy. ^u can 
f nd Tiore information about Automated Error 
Prevention at www.parasc-tt.com. 
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Automate unit test case 
JUnit and Java with 





ion for 
Jtest. 
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Parasoft Jtest Is the first and only automated unit testing 
tool for Java development. 

'A- r- \:r. n r.\ -,k, .l:ort ~\?:.i\ irr T.-.l'.vr^ :::■: rn ik -,- r.in: \: r n'rrsrn!:i r-.ri.hr .:rii1 \?:v r p it: r.rd r^r-h 
without usc. f LnteJVflirtion. Jtost also -enables you to automate agression ivsim and static analysis, ^or loyal 
JUnli users,, Jtesi is dessgned to 'niiy support exisMig test cases re auionate the creation of taw JJnli style 
test cases. 

Learn how Jtest can enhance JUnit capabilities.., 

Down oad a trts aval copy :>l Jlssl akrg v/.th :lt inlormat.ve raw ivhMe paper Ertitled r Autdmat2d Java Unit 
Testing. CndiriQ Standard Comp iirce, &nd TeaTi-Wde-E'rcr P'svErtinn 



For Downloads go (o www.pflrasoft.cain/j1effk. 
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Put the power of web-based ad hoc 
reporting in your end-users' hands! 




LogiXML presents: LGX Ad HOC 



© Zero Foot Print - With LGX Ad Hoc your end-users and 
administrators require no client software or plug-Ins 
Id create and administer reports. 

C Administrative Module - With this web-has ed module 
your administrators can set roles and rights and create 
useable business objects that yum end-users can 
understand with caching and on-demand reporting, 

O End-User Module - Your end-users will select Irani 
preset data objects with user-friendly labels to create 
the reports they need via an easy-to-use wizard. 

© Web- based Permissions Management - 

Administrators can define roles and permissions down 
to I ho data column level, 

C Easy Integration with Existing Web Applications - 

Many limes the ability to create ad hoc reports needs 
to be integrated with an existing application that your 
end-users are already using. LGX Ad Hoc makes 
seamless integration with sign -on easy and secure. 

O Charting - Your end -users can easily create charts 
with just a few clicks. 

Q Favorite Reports - Users have the ability to save and 
organize reports in private folders and administrators 
have the right to make the in publicly assessable to 
others in the organization, 

© PDF, Word, Excel Export 

C Interactive and Printable paging option 



Log I XML 

111 • 



7800 We&lpB'fc DriVO 
SullB T107 
McLean. VA 72102 

1 eae lqgixml 

www J ag i x m L<c q m 

For more information & a demo, 
goto wwwJagixml com /Ad hoc 



SOAPtest 2.5 Verifies 
WS-I Profile Compatibility 



BY YVONNE L. LEE 

Parasoft Corp. in Feb- 
ruary released version 
2.5 of its SOAPtest 
automated Web services 
testing software that can 
check for compatibility 
with the Web Services 
Interoperability Organi- 
zation's (WS-I) Basic 
Profile. 

"SOAPtest comes 
shipped with the [WS-I] 
tools, and we put a GUI 
front end on, and all you 
do is give it the WSDL 
Uniform Resource Iden- 
tifier and it will validate 
the WSDL itself as well as the SOAP 
traffic," said David McCaw, Parasoft's 
manager of Web services solutions. 

SOAPtest is a tool that verifies the 
behavior of servers running Web ser- 
vices by acting like a client communicat- 
ing with the services. It is designed for 
Web services developers to test a single 
service before it is deployed onto a serv- 
er, he explained. McCaw said one of the 
other significant additions to SOAPtest 
2.5 is that it now offers customizable 
HTML reports so that organizations can 
take the metrics from the various tests, 
which include load tests, database tests 
and performance monitoring, and 
choose which metrics they want to com- 
pare. Organizations can create their own 
templates based on which metrics they 




The load-testing feature can now monitor servers using SNMP. 



want to monitor, he said. 

Parasoft has added security features 
to version 2.5, said McCaw. "We're able 
to send requests that are encrypted, and 
we have support for [OASIS' Security 
Assertion Markup Language], support 
for encryption and support for digital 
signatures," he said. 

The Monrovia, Calif., company also 
has expanded SOAPtest's load-testing 
so that it now can monitor servers 
under stress using Simple Network 
Management Protocol (SNMP), just as 
a network management package would. 
This makes it possible to test where a 
bottleneck in a functioning service 
would be, McCaw said. 

The software is available now. Pricing 
starts at US$3,995. I 



OnDemand Ships Installer Software 

Packaging features help ready apps for installation 

package with the application, not just 



BY JENNIFER DEJONG 

OnDemand Soitware Inc. announced 
last month the availability of Winlnstall 
8, a new version of its software distribu- 
tion and inventory management tool. 

Although it is aimed chiefly at IT 
administrators who want to manage desk- 
top computers more efficiently, Winln- 
stall 8 includes advanced Microsoft Soft- 
ware Installer (MSI) packaging features 
that make it easier for developers to write 
applications that can be automatically 
installed and updated, said Winlnstall 
CEO Jack Palmer. 

MSI is a standard file format for 
application distribution in the Windows 
environment, explained Palmer. 

"In-house application developers have 
traditionally turned the applications they 
wrote over to IT and said, 'It's your 
responsibility to get it installed,' " he said. 

That meant IT administrators had to 
convert instructions from a developer's 
setup program and create an MSI file 
before the application could be 
installed. "Winlnstall makes it easy for 
developers to provide an actual MSI 



the setup routines," said Palmer. 

OnDemand developed the MSI Pack- 
ager in Windows 2000 Advanced Server 
for Microsoft and also provides an updat- 
ed version for Windows Server 2003. 

New to Winlnstall 8 is a centralized 
database that integrates MSI packaging 
data with distribution and inventory 
data, said Palmer. New features for MSI 
packaging include conflict assessment 
checking, MSI validation and automatic 
repair, and a new MSI patch wizard. 

Palmer said the big picture is about 
saving money on how desktops are man- 
aged. "Is there going to come a time 
where developers and IT can work 
together on how machines are man- 
aged? It's a cultural issue, which has so 
many dollars tied to it," he said. 

Winlnstall 8 is available immediate- 
ly. Pricing is US$18 to $20 per machine 
on the network. MSI Packager Profes- 
sional Edition, which does not include 
software distribution and inventory 
management capabilities, costs $2,500 
per console. I 
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Nexaweb Joins Rich Internet Market 

Start-up company puts new face on Java Web applications 



BY DAVID RUBINSTEIN 

Taking the notion of rich Internet appli- 
cations in a slightly different direction, 
Cambridge, Mass., start-up Nexaweb 
Technologies Inc. is expected this week 
to release version 3.0 of its application 
deployment platform that now includes 
a full implementation of the Eclipse 
development environment and a new 
prototyping tool. 

"We're trying to solve the perfor- 
mance and functionality issues associat- 
ed with deploying mission-critical enter- 
prise applications over the Internet, 
without proprietary standards, tools and 
methods," said Larry Geisel, Nexaweb's 
CEO. The company was founded in 
2000; Geisel joined as CEO in August 
2003, shortly after the company received 
US$4.3 million in a first round of ven- 
ture funding. 

Geisel explained that Nexaweb's ap- 
proach is different from those of Curl 
Corp., Droplets Inc., Laszlo Systems Inc. 
and Macromedia Corp. in that Nexaweb 
is providing a rich interface on high-trans- 
action, time-critical enterprise Java appli- 
cations that are used internally for such 
tilings as ERP/CRM, business intelligence 
and financial trading systems. "If you want 
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A call center application can be designed in Nexaweb to accept real-time data feeds without 
having to refresh the page. 



to run these applications on the Internet, 
you don't want to run them on a platform 
optimized for visualization," he said. 

Nexaweb's solution is built behind a 
thin, 140KB client. "When you have an 
application that has to open 20 different 
connections, that kind of scale can't be 
done on the client side," explained co- 



founder and CTO Coach Wei. Nexaweb's 
server component, he added, resides 
inside a J2EE-compliant application serv- 
er, allowing users creating rich enterprise 
applications to take advantage of all the 
feature sets of the Java platform. Nex- 
aweb's servlet can run inside Web and app 
servers from Apache, BEA, IBM and Sun. 



"Nexaweb applications are standard 
J2EE applications," he said, although 
only XML is pushed down to the inter- 
face; automatic compression of XML 
transmissions, along with what the com- 
pany called intelligent Data Object 
Model replication between client and 
server, maximizes performance. 

The client component, Geisel said, is 
a Java binary sitting in a Java applet con- 
tainer that can run in any standard 
HTML browser or as a stand-alone 
application. The client has an XML ren- 
dering engine and an extensible library 
of user interface components. Nexaweb 
can maintain stateful persistence ses- 
sions, allowing automatic synchroniza- 
tion for occasionally connected comput- 
ing or work on mobile devices, he said. 

Developers using the new Studio 
development tool have a full GUI envi- 
ronment for creating applications specif- 
ically for the Nexaweb platform, he 
added, and can take advantage of the full 
Eclipse IDE capability to create enter- 
prise Java applications that can handle 
incremental updates to the interface, 
data or application logic without having 
to rewrite Java code. 

The new version also includes a 
Designer component in which users can 
create screen and GUI prototypes from 
a drag-and-drop environment that also 
can generate the XML code used in the 
presentation layer, Geisel said. Pricing 
starts at $30,000 per server. I 
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Where's the sleeping cat? 

How many times did you use Sleepycaf s ' 



If you used email, hrowsed the Weh, bouqht a bsok online, o F traded 
<j stock, you may very well have used Uerkcj ty D 15 wi Lhou L knowing 
it. You'll find Rerkeley f>Fl in every copy of I nun, rWDLMX, Apache, 
iEncmiiiL Perl anc Mazi Id. And "n un mme'tlal prouutta from Cisco' 
Sun* HP," FWC* Motorola* arrj A p-p-le* as well as services from 
ArnazanT Grxig e* ard AOL?" Read mare abo^t thE sleeping caEat 
www,ileepycar.cQmi%hereittwcaft.pdf. 

Serke cy JG i iho noic widely uicd data nanagcmei; software 
in The wc rid with ave-r 20G- m il lion copies depl Dyed. Sohwa re 
devdoueri ruly on il to build f-JiEer, low^r toil product! jrd to 
shorten development cycle time. 3owrload Berkeley DB Today. 
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< continued from page 8 

form 3.2 for Windows, an integration distribution of the Apache Web 
server with PHP, Perl and OpenSSL, contains the latest version of 
those open-source projects . . . PathScale Inc. has a new set of 64-bit 
compilers for Advanced Micro Device's Opteron and Athlon-64 proces- 
sors. The PathScale Compiler Suite contains C/C++ and Fortran, and 
is compatible with the GNU/GCC tool chain and PalhScalC 
debuggers . . . The new Palm OS Developer Suite, 
announced by PalmSource Inc., will be an open- 
source IDE based on Eclipse, and can target both the Motorola 68K 
and ARM-native Palm OS applications. The company is offering pre- 
views; no date has been set for general availability . . . Version 5.5 of 
LGX Ad Hoc Reporter Builder, from LogiXML Inc., has added features 
for end-user generated charts, a new report wizard and administrator- 
controlled data filtering. The software runs on Windows and exports 
reports to Excel, Word and PDF; the cost is US$7,500 per server for 
unlimited users . . . Parasoft Corp. is offering .Test 1.5, an update of 
its unit testing tool for the .NET Framework. The new version can gen- 
erate test cases that can be compiled and run with NUnit; plus it has 
improved dynamic analysis that can reduce incomplete test scenarios, 
an enhanced user interface and new command-line options. It costs 
US$900 per seat . . . Segue Software Inc. has released SilkPerformer 
Component Test Edition, a functional tester for Web services, Enter- 
prise JavaBeans and remote components of the .NET Framework. The 
software, available for both Java and .NET, costs US$3,000 per seat 
. . . OlikTech International AB has updated QlikView, its business intel- 
ligence dashboard builder. Version 6.03 
CMllcVl'3W6 now runs on the 64-bit Itanium 2 
processor . . . The new version of PreEmptive Solutions Inc.'s source 
obfuscation software for Java, DashO, now encrypts strings, scram- 
bles control flow and has a new GUI. Version 3 also includes Java run- 
time optimizations. The software costs US$1,495 per seat 
. . . TimeSys Corp. has updated its TimeStorm family of embedded 
Linux tools to work with kernel 2.6, and has reduced the price of the 
Eclipse-based TimeStorm IDE to US$795 per seat. The company also 
is beta-testing its TimeStorm Linux Development Kits for the Power- 
PC processors . . . Microsoft Corp. has updated its MapPoint com- 
mercial Web service, which provides dynamic road-map capabilities via 
SOAP. Version 3.5 finds points of interest around a route, has updated 
geographical data and offers new customer-service features. License 
costs for the MapPoint service can be on either a per-named-user or 
per-transaction basis . . . Version 4.1 of Code Co-op, a peer-to-peer 
version control system from Reliable Software LLC, includes a light 
version of Beyond Compare, a code differencing-viewing utility from 
Scooter Software Inc. It also can work with Borland's Delphi 8, in addi- 
tion to various C++ IDEs. The software, which runs on Windows, costs 
US$159 per seat. 



, PEOPLE , 



Dublin, Ireland-based test tools maker Shenick has appointed Eoin 
O'Driscoll, the former head of Lucent Ireland, as its chairman. The 
company had received €2.5 million in funding in October . . . Peter 
Loveless is the new CEO of database provider JBase International Inc. 
Loveless was formerly executive director of Financial Objects PLC. The 
previous CEO, David Bryant, will continue with the company working 
on business development in Asia and the Pacific Rim . . . Computer 
Associates International Inc. has hired John Mayer as VP of business 
strategy and product management for the AIIFusion application life- 
cycle management and CleverPath information management product 
lines. Mayer was formerly at Forrester Research and Giga Information 
Group . . . ICEsoft Technologies Inc., a maker of Java Web access soft- 
ware, has appointed Steve Maryka as CTO and Rod Charko as VP of 
marketing. Maryka was co-founder and VP of technology for AudeSi 
Technologies. Charko had been an investment director with BDC Ven- 
ture Capital . . . Segue Software Inc. has hired Joseph Friscia as EVP 
of sales and marketing and Andre Pino as chief marketing officer. 
Friscia was EVP and general manager of Pegasystems' application 
business. Pino was in charge of marketing at iPhrase Technologies. I 



Angel.com Lets Web Services Talk 

Application service provider uses VoiceXML-based Ul 



BY YVONNE L. LEE 

Angel.com, a subsidiary of busi- 
ness integration solutions 
developer MicroStrategy Inc., 
in February began offering IVR 
for Web Services, a hosted ser- 
vice that it claims enables orga- 
nizations to make Web services 
accessible by phone. 

According to Steven Brown, 
Angel.com's director of business 
development, the site simply 
adds a VoiceXML-based inter- 
face to existing Web services. 
"[Developers are] able to take 
applications they are building for 
the Web and extend that applica- 
tion through the telephone 
through a hosted service," he 
said. "They don't have to make 
any investment in the telephony 
infrastructure, and can just focus 
on the logic. The great benefit is 
they can use existing Web ser- 
vices. It's just a different presen- 
tation layer for the user." 

Developers create voice 
sites by going to the Angel.com 
Web site and entering informa- 
tion about the expected touch- 
tone or voice input, and about 
how the output should be 
returned to the end user. For 
example, Brown said a store 
finder application would return 
a series of voice files containing 
the addresses of the nearest 
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Developers create voice sites by entering information about expected input. 



stores that users could access by 
pressing numbers on their key- 
pads. Information is delivered 
to the end user either as record- 
ed or digitized speech. 

Angel.com services include 
the SiteBuilder application for 
building Web sites, consulting 
services and a dial-in number. 
That dial-in number can be 
either a toll-free number or a 
number in the 703 area code, 
which is local to the MacLean, 
Va. -based company. Options 



include professionally recorded 
voice prompts. 

A month-to-month plan costs 
US$119.95 and includes a toll- 
free number and 1,000 minutes. 
The Professional package costs 
$499.95 and includes two toll- 
free or local numbers and 2,000 
minutes of dial-in time, which 
can be used over the course of a 
year. The $999.95 Enterprise 
package includes three tele- 
phone numbers and 3,000 min- 
utes to be used within a year. I 



MICROSOFT EXPECTED TO UNVEIL 
SPEECH SERVER 2004 AT VSLIVE 
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BY JENNIFER DEJONG 

Microsoft Corp. chairman Bill 
Gates is expected to launch 
Microsoft Speech Server 2004, 
preview the "Whidbey" update 
to Visual Studio .NET, and 
discuss application develop- 
ment for mobile devices at the 
combined VSLive, Microsoft 
Mobile Developer Conference 
and Avios SpeechTEK Spring 
events at the Moscone West 
Conference Center in San 
Francisco on March 24. 

Microsoft declined to discuss 
specific features and pricing 
for Speech Server. But the com- 
pany is expected to demon- 
strate dozens of speech-enabled 
applications from joint develop- 
ment partners and enterprise 
customers, based on the beta 
version of Speech Server, 
according to James Mastan, 
Microsoft's director of market- 



ing for the Speech Server grovip. 

Because the Speech Server 
SDK will be delivered as an 
extension to VS.NET, there is 
only an incremental learning 
curve for the Visual Studio 
developers to speech-enable an 
application, said Mastan. 

For instance, a developer 
could add speech capabilities to 
an existing Web-based airline 
reservation application, by drag- 
ging and dropping speech con- 
trols in VS.NET, said Mastan. 
"You could book your flight 
online, and later, if your plans 
change, why not call that same 
codebase with your cell phone?" 
said Mastan. 

The event begins on March 
23 with five preconference 
workshops, including "Build a 
.NET App in a Day," "C# as a 
Better C++" and "Focus on the 
Middle Tier." I 
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CONFERENCE: March 23-27 
Moscone West Conference Center, 
San Francisco 

KEYNOTES: 

Wednesday, 9 a.m., opening keynote, 
Bill Gates, chairman, Microsoft Corp. 

Wednesday, Kai-Fu Lee, corporate VP 
of natural interactive services divi- 
sion, Microsoft Corp. 

Thursday, "Mobile Application Devel- 
opment with .NET," Don Box, XML 
messaging architect, Microsoft Corp. 

Thursday, "Metropolis: Trends in In- 
formation Technology," Pat Helland, 
.NET enterprise architecture team, 
Microsoft Corp. 

Friday, "Using Business Intelligence 
in Your Applications for Fun and Prof- 
it," Bill Baker, general manager, busi- 
ness intelligence, SOL Server busi- 
ness group, Microsoft Corp. 

VSLive: www.vslive.com 

Microsoft Mobile DevCon: 
www.microsoftmdc.com 

Avios SpeechTEK: 
www.speechtek.com 
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4 continued from page 1 

look at a different kind of prob- 
lem, such as sharing contact 
data, there are hundreds of 
applications that need to share 
that data," said Drummond 
Reed, chief technical officer at 
Cordance Corp., which plans to 



create a repository of addresses 
to be used in the Dataweb, and 
chair of the technical commit- 
tee for creating the new system. 
"It's very inefficient for all these 
XML schemas and WSDL ser- 
vices to be inventing the wheel 
each time." 

In the Dataweb, an address 
could get updated in one 



place, and that update would 
be propagated in subscribing 
pages, Reed said. In addition, 
a piece of data such as an elec- 
tronic business card could 
have permissions attached 
such that a recipient could link 
to it but would not be autho- 
rized to change it or pass it on, 
he said. 



Five years ago, a group 
called XNS began working on a 
smart identifier that would pro- 
vide not only information about 
the location of data and the pro- 
tocol to access it, but also what's 
called a "contract," which spells 
out permissions, authorization 
for access, information about 
who owns the data and how to 
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synchronize it. It submitted 
that work to OASIS last year. 
Now, a new technical commit- 
tee has been formed to specify 
a system to resolve and transmit 
the data, sort of a Domain 
Name System for the new Web, 
said Reed. 

The new identifiers are 
referred to as extensible 
resource identifiers, or XRIs. 
The system for resolving XRIs 
is called XRI Data Inter- 
change, or XDI. XDI uses 
XML documents. 

BORROWING FROM W3C 

The Dataweb takes some of its 
ideas from the W3C's Semantic 
Web, Reed said. The Semantic 
Web seeks to turn the Web into 
a giant library based on the 
Resource Description Frame- 
work (RDF), which is a system 
of metadata, or a way to 
describe, organize and catego- 
rize the information on the 
Web. The Dataweb would not 
be such an embracing library, 
but would instead use metadata 
to tie information more closely 
together. 

"There's a problem at the 
heart of both the Semantic 
Web and the Dataweb: How 
do you describe information so 
that it can be shared across 
the Web?" Reed said. "[The 
Semantic Web's] RDF has a 
way of doing that using [Uni- 
form Resource Identifiers] to 
describe the data. RDF is a 
general solution for describing 
data anyplace on the Web. 
With XDI, we were starting 
from a different standpoint, 
which is data sharing." 

The XDI technical commit- 
tee plans to deliver the XDI 
metaschema, which describes 
how to incorporate and link 
XDI documents into other 
XML schemas, around May, 
Reed said. 

The group also plans to 
deliver the description of a pro- 
tocol for sending and receiving 
XDI documents at around that 
time, he said. The protocol will 
not be complicated or difficult 
to design because it will have 
only four commands: get, put, 
delete and post, he said. 

The third and most complex 
piece of the puzzle is due in the 
fall. That piece, the XDI service 
dictionary, determines the ele- 
ments needed in an XDI docu- 
ment and how they will appear 
in it. It will take the longest to 
sort out because different orga- 
nizations will have different 
opinions about the necessaiy 
pieces, Reed said. I 
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Desaware Releases Code With Components 



BY JENNIFER DEJONG 

In an effort to increase adoption 
of its COM and .NET compo- 
nents, Desaware Inc. was 
expected to announce last month 
that it is repackaging most of its 
product line to make the source 
code available to customers. 

The company announced the 
immediate availability of two 
software bundles, Universal 
.NET 2004, for developers using 
Visual Basic .NET and C#; and 
Universal COM 2004, for Visual 



Basic 6.0. They package existing 
Desaware components, includ- 
ing, for the first time, complete 
source code for each. 

Because not all component 
vendors make all their source 
code available, developers have 
been reluctant to adopt more 
components, said Desaware 
CEO Dan Appleman. "They 
are concerned about being left 
high and dry." 

Appleman claimed that 
although some component ven- 



dors have made source code for 
some of their components avail- 
able, Desaware is the first com- 
ponent vendor to provide all of 
the source code for all of its 
components, including legacy 
products. He expects other 
component vendors to follow 
this lead. "I am hoping that 
[this decision] will give us a 
competitive advantage and that 
it will set an example," he said. 
Appleman said that the com- 
pany based the decision to 
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MACROVISION 

- continued from page 1 

pie who dabble at home on 
weekends is a nonstarter," he 
said. "But you can unbundle, or 
turn off, certain features for 
professionals, dumb down the 
application and offer it at a low- 
er price point." 

The issue of licensing 
becomes important in the con- 
texts of increasing complexity 
within an organization, and 
increasing piracy of software. 
"There tends to be rampant 
unlicensed use in the industry," 
Greenberg said, in part faulting 
software vendors for targeting 
heavy users with per-seat 
licenses that shut out light users 
by setting too high a price for 
the software. 

But he also said it's just too 
difficult to monitor and police 
software installation when you 



try to go beyond a locked 
license scheme to give cus- 
tomers the price flexibility they 
seek. "Enterprises are demand- 
ing custom licensing terms," 
Greenberg said. "Volume dis- 
counts are a move in the right 
direction, but that still doesn't 
address people who only use 
software once every few weeks." 

Companies run multiple 
applications and modules in 
their systems, multiplied by 
software and systems they 
acquire, multiplied by Web ser- 
vices, Greenberg outlined, say- 
ing there needs to be an 
accompanying growth in diver- 
sity of licensing models. 

With FLEXnet Publisher, 
there are five modules built 
into the software. When a soft- 
ware publisher instruments his 
code with the FLEXnet Pub- 
lisher SDK, he can set expira- 
tion limits, allow "try-and-buy" 



functionality or build user pric- 
ing into the software. Included 
are modules for full licensing, 
use-based or utility pricing, 
promotional or trial licensing, 
security and operations. Securi- 
ty features can be dialed up or 
down depending on need, and 
the operations module helps 
manage back-office functions 
such as managing license keys 
and upgrades. 

The company also announced 
that it plans to release this spring 
a software asset management 
system, called FLEXnet Manag- 
er, to replace the company's ear- 
lier SAM Suite. 

Befusing to get specific, 
Greenberg said pricing for 
FLEXnet Publisher is driven by 
variables depending upon the 
level of functionality. Customers 
can buy any of the modules indi- 
vidually or can purchase the 
whole package, he said. I 



make source code available on 
feedback from existing cus- 
tomers and from developers 
who have shied away from com- 
ponent use. "To be perfectly 
honest, it's a major mental shift 
on our part. These are the 
crown jewels. We had to think it 
through and make sure this is 
the right thing to do," he said. 

A spokesperson for Infragis- 
tics Corp., which sells COM, 
.NET and Java components, 
said the company makes source 
code available for the .NET 
components, but not the COM 
components, included in its 
NetAdvantage 2003 suite. 
Source code is available for all 
components included in the 
company's Jsuite, for Java 
developers. 

Universal .NET 2004 in- 
cludes eight components that 
allow developers to cany out a 
range of tasks, such as creating 
advanced state machines in 
.NET, managing ASPNet links 



more easily, and testing and 
debugging services without 
having to install them. 

Universal COM 2004 in- 
cludes eight components that 
extend Visual Basic 6.0 by per- 
forming low-level system tasks 
that would normally require 
advanced programming in 
C++, said Appleman. It solves 
problems such as "DLL-Hell" 
and allows developers to create 
fully functional services in Visu- 
al Basic 6.0. 

Pricing for Universal .NET 
2004 and Universal COM 
2004 is US$495, sold separate- 
ly. The products are offered 
together for $795. Customers 
may be charged for technical 
support, depending on the 
time it takes Desaware to 
resolve the problem. 

Individual components, 
which include free technical 
support, will continue to be 
sold separately but will not 
include the source code. I 



LINUX MANTLE 

- continued from page 1 

a Linux distribution to adequate- 
ly address enterprise-class appli- 
cations such as online transaction 
processing and decision support 
systems. Prioritized and orga- 
nized into categories, die capa- 
bilities include reliability, avail- 
ability, scalability, performance, 
manageability, standards, secu- 
rity and usability. The docu- 
ment is available now at 
www.osdl.org. 

UNITEDLINUX MOVES ON 

Hunter said that UnitedLinux 
as a legal entity will not imme- 
diately disappear. "Conectiva, 
SUSE and TurboLinux contin- 
ue to sell products powered by 
UnitedLinux and continue to 
maintain and support that core 
offering. But SCO took them- 
selves out of the Linux market- 
place, so they are not selling or 
maintaining it." Neither did 
SCO relinquish its position in 
UnitedLinux, she added. 

Blake Stowell, spokesman 
for The SCO Group, which in 
February filed a copyright 
infringement lawsuit against 
Novell for Linux, said the only 
reason that SCO remains part 
of UnitedLinux is due to con- 
tractual requirements. "We 
have obligations to customers 
that purchased UnitedLinux 
through SCO early on and 
needed to see that through." 



SCO will provide software 
updates through the end of 
2004, Stowell added. 

SCO's position with regard to 
the UnitedLinux distribution 
presents an interesting paradox. 
According to Stowell, SCO cus- 
tomers that purchased the distri- 
bution, which is based mainly on 
SUSE Linux, would be "held 
harmless" from the SCO suit. 
"But any other commercial users 
of Linux based on the 2.4 kernel 
or later need to purchase the 
SCO IP license," because for 
customers who purchased that 
distribution through SUSE, 
Conectiva or TurboLinux, "there 
was never any compensation 
provided to SCO for intellectual 
property that may have been 
misappropriated into Linux." 

According to Hunter, des- 
pite a total corporate break- 
down, there's still a future for 
UnitedLinux. "The parties that 
offer UnitedLinux are going to 
work outside the UnitedLinux 
framework to develop a road 
map for the future based on the 
2.6 kernel. In the meantime, 
any maintenance, enhance- 
ments, changes or patches to 
the current product will contin- 
ue to be offered." 

Meanwhile, OSDL has been 
steadily adding staff and enter- 
prise members. "We've got a 
good track record, and that is 
attractive to employees as well as 
member companies," said Tim 
Witham, OSDL's lab director. I 
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Wind River's VxWorks 6 Adopts Process Model 

Unix-like memory protection designed to simplify porting source code to its RTOS 



BY EDWARD J. CORREIA 

Just months after its decision to 
embrace Linux after years 
spent opposing it, Wind River 
Systems Inc. this month is 
expected to unveil VxWorks 6.0, 
the latest version of its flagship 
RTOS that now will implement 
a process model similar to those 
of Linux and Unix, which it 



claims simplifies the porting of 
source code from those operat- 
ing systems to VxWorks 6. 

The company also will open 
the VxWorks 6 API, which for 
the first time will permit devel- 
opers to enhance and extend 
the RTOS. Wind River also is 
set to release Wind Power 2.0, 
an Eclipse-based successor to 
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The Wind Power 2.0 IDE will have an Eclipse look and feel, shown above. 



its Tornado IDE that it says can 
target both VxWorks and Linux. 
"This is a tremendous in- 
crease in the openness of our 
platform," said Dave Fraser, 
Wind Rivers chief marketing 
officer, of a strategy that he said 
more closely aligns the compa- 
ny with its Linux competitors. 
A significant advance will 
_i.h be the switch from 
VxWorks 5's single 
address space to a 
real-time process 
model, which Fraser 
said gives each appli- 
cation its own mem- 
ory space, some- 
times referred to as 
memory protection. 
"There's a large 
chunk oi source 
code out there that 
customers occasion- 
ally would like to 
bring onto a real- 
time or embedded 
system. In a process 
model, everything 
gets its own back- 
yard," Fraser said. 
"Memory protection 



electronicaUSA Latches Onto ESC 



BY EDWARD J. CORREIA 

Tell your friend Veronica: 
ESC now includes Electronica. 
The news may have eluded 
"Hanukkah Song" writer Adam 
Sandler, but attendees of this 
year's electronicaUSA and 
Embedded Systems Confer- 
ence, taking place from March 
29 through April 1, are sure to 
notice more of everything than 
is usual for ESC. 

Organizers CMP Media 
LLC, Munich International 
Trade Fairs and Munich Trade 
Fairs North America said they 
are expecting about 15,000 
attendees, 400 exhibitors and 
300 conferences and sessions 
sprawled across 195,000 square 
feet of San Francisco's 
Moscone Convention Center. 
Last year's ESC, which did not 
include electronica, attracted 
about 11,000 people. 

Rilled as the largest design 
show in North America, the 
show will include conferences 
grouped into four main cate- 
gories: embedded systems, 
communications design, power 
electronics and emerging tech- 
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CONFERENCE: March 29-April 1 
Moscone Conference Center, 
San Francisco 

EXHIBIT HOURS: 
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TUTORIALS: 

Monday, 8:30 a.m. -5 p.m. 

CLASSES: 

Tuesday, 8:30 a.m.-5:05 p.m. 
Wednesday, 8:30 a.m. -6 p.m. 
Thursday, 10 a.m.-5:15 p.m. 

OPENING KEYNOTE: 
Tuesday, 10 a.m.-ll a.m., "Living the 
Dream: Lessons Learned on the 
Ocean Floor," Dr. Robert D. Ballard, 
oceanographer 

www.esconline.com/electronicaUSA 

nologies, with all but the latter 
conference featuring keynote 
addresses. 

The embedded systems 
keynote, titled "Envisioning the 
Connected World," will be 
delivered by Jerry Fiddler, 
founder of Wind River Systems 



Inc. "The World of Telecom: 
Today's Chaos, Tomorrow's 
Promise" will kick off the com- 
munications design conference 
in a keynote delivered by 
Robert Lucky, independent 
consultant and former corpo- 
rate vice president at Telcordia 
Technologies Inc., which devel- 
ops technologies for the tele- 
com industry. Alexander Lidow, 
CEO of International Rectifier, 
which develops and markets 
electronic components, will dis- 
cuss "Systems Approach to 
Solving Challenges in Power 
Management: From AC Mains 
to Points of Load." 

The emerging technologies 
forum comprises five confer- 
ences taking place on the exhib- 
it floor, including "Connectors: 
High-speed Interconnects and 
Extending Bandwidth," which 
will cover recent advances in 
connector technology, and 
"PCR and Assembly: Lead-free 
Process and Embedded Com- 
ponents," which will delve into 
issues component makers face 
as they try to pack more func- 
tionality into smaller spaces. I 



in [VxWorks] 6.0 
makes it relatively 
simple to port tech- 
nology written for 
the process model 
of Unix or Linux." 
Fraser added that 
although the process 
model in VxWorks 6 
is "a lightweight 
one," it should be 
extremely familiar 
to anyone who's 
written or migrated 
code from any pro- 
cess model operating system. 

Wind River also will now 
offer developers an option to 
license its tools free of per- 
device production licenses, 
which according to Fraser, 
"lets customers do apples-to- 
apples comparisons." Howev- 
er, Fraser claimed that many 
customers still prefer a royalty 
option, under which 
Wind River takes a 
slice oi revenue gen- 
erated by device 
sales. "Shared suc- 
cess is also shared 
risk — the best way 
to think of produc- 
tion licenses," Fraser 
said. Prices were not 
disclosed at press 
time. 

Michel Genard, 
Wind River's senior 
director of platform 
marketing, claimed 
VxWorks 6 also will be more 
reliable than its predecessors 
with the addition oi error 
detection and reporting, and 
support for a memory manage- 
ment unit (MMU) while main- 
taining backward compatibility 
with VxWorks 5.x. "If an exist- 



BREEZING INTO LINUX 

VxWorks 6.0: 

• now supports MMU, process model 

• has open, extensible API more like Unix 

• is backward compatible with VxWorks 5.x 

• has error detection and reporting 

Wind Power 2.0 IDE: 

• is now based on Eclipse 

• targets VxWorks and Linux 

• will replace Tornado 

• has royalty-free licensing option 

Source: Wind River Systems Inc. 



ing customer wants to run on 
VxWorks 6 without using the 
MMU and error-detection 
extensions, they can run with- 
out rewriting their RSP," he 
said, referring to the board sup- 
port packages unique to every 
embedded design. 

Also open and extensible, 
to its new Eclipse 
base, is Wind Power 
2, which Fraser said 
will eventually re- 
place the Tornado 
brand. "Tornado will 
continue to be avail- 
able for many years, 
but there will be no 
major new releases 
going forward," and 
will instead have its 
compilers, debuggers 
and other function- 
ality ported to the 
new IDE. 
VxWorks 6.0 and Wind 
Power 2.0 will be available 
on March 1 as a free upgrade 
for current customers of Wind 
River's Enterprise Licensing 
Model (ELM), according to 
Fraser. General availability 
is scheduled for the fourth 
quarter. I 



thanks 



The new RTOS will be 
more reliable than its 
predecessors, claims 
Wind River's Genard. 
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POINTBASE ROLLS WITH PUNCHES 



BY EDWARD J. CORREIA 

The latest version of the Point- 
Base embedded Java database 
can now apply database 
changes from log files, the com- 
pany has announced, claiming 
that capability is far faster than 
performing a data recovery 
from the last full backup. 

The company, which was 
acquired last year by integra- 
tion solutions developer 
DataMirror, also said that the 
so-called Roll Forward Recov- 
ery feature in PointRase 4.8 can 
help manage data backups and 



minimize exposure to data loss. 

PointBase also claims that 
database performance has been 
improved through count opti- 
mization, which speeds the dis- 
covery of rows in a table, and 
nested query optimization, 
which it said speeds up those 
queries, especially those with 
large temporary tables. 

The company also raised to 
version 4.8 its UniSync syn- 
chronization server and Point- 
Rase Micro J2ME database, 
which it said were largely main- 
tenance releases. I 
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Should 

Embedded Linux 
Be Standardized? 

The answer could send ripples through 
embedded development for years to come 



BY EDWARD J. CORREIA 




With Linux the heir apparent 
to the home-grown RTOS 
throne, well on its way to oust- 
ing proprietary embedded sys- 
tems in an unintentional coup, 
the next decision faced by embedded sys- 
tems developers is whether or not to fol- 
low conventions when putting Linux 
together. And that decision could have a 
profound impact on the future of embed- 
ded development. 

At the time it was published in late 
2002, the Embedded Linux Consor- 
tium's Platform Specification (ELCPS) 
1.0 was thought by the sizable organi- 
zation to be the definitive standard for 
embedded Linux development. The 
spec defines an API based on POSIX 
and the Linux Standard Base (LSB) 
with multiple levels of device function- 
ality In theory, software written for 
one compliant device would run on 
another almost unchanged, and the 
spec included a mechanism to let apps 
know what services to expect on a giv- 
en device. 

Sounds perfect, 
right? But more 
than two years lat- 
er, the ELC's 
membership had 
dwindled from 
more than 100 to 
just nine, and only 
two of those com- 
panies have adopt- 
ed the spec. 

Device devel- 
oper SnapGear was 
among the found- 
ing members of the ELC, an organiza- 
tion that had originally focused on 
marketing embedded Linux. "The Plat- 
form Specification came along later," 




Trolltech's Nord: 
Nothing much was 
happening at the ELC. 



said Rick Stevenson, general manager 
of the SnapGear division of Cyber- 
Guard Corp., which acquired SnapGear 
last November. 

By then, SnapGear had already 
dropped out of the ELC, because 
according to Stevenson, the ELC's 
standardization efforts held little cus- 
tomer value for a company that is an 
OEM of Linux-based network security 
devices. "ELCPS was not something 
customers ever asked about," he said, 
adding that Linux itself provides as 
much standardization as the company 
needs. "If you've got a vanilla kernel, 
porting is relatively simple compared to 
moving to a new hardware platform 
with different processor devices and 
memory maps. A consistent Linux plat- 
form is pretty much guaranteed by the 
kernel anyway." 

Haavard Nord, CEO of GUI tools 
developer Trolltech AB, another of 
ELC's founding members, said his com- 
pany also dropped out when the organi- 
zation veered from its marketing roots. 
"We didn't see that very much hap- 
pened," he said, referring to the failure 
of the ELCPS to gain traction. 

CELF CENTERED 

One organization that appears to be 
gaining traction is the Consumer Elec- 
tronics Linux Forum (CELF), a group 
formed in June 2003, consisting mainly 
of device and chip makers focused on 
developing enhancements for embed- 
ded Linux to improve power manage- 
ment, boot and shutdown times, foot- 
print and features that members agree 
will add value only if employed consis- 
tently by everyone. 

"These features are below the value 
line," said Scott Smyres, CELF chair- 



^ 




man and vice president of the network 
and systems architecture division of 
Sony Electronics, which founded CELF 
along with Matsushita. The group is set 
to release CELF 1.0 in May, which 
Smyres said can be applied to any cur- 
rent kernel.org snapshot. 

While CELF is focused chiefly on 
consumer devices, its benefits will 
spill over to the enterprise, according to 
Scott Hedrick, senior product market- 
ing manager with 
embedded Linux / 
developer Monta- 
Vista Software *^^T 
Inc., a founding 
member of both 
CELF and the 
ELC. "Having Lin- 
ux in edge devices 
such as those in 
homes, provides a MontaVista's Hedrick: 
great opportunity The benefits of 
to link them with CELF will reach the 
enterprise appli- enterprise. 
cations, operated 

either by device manufacturers, opera- 
tors, enterprises selling services or com- 
panies that want to provide access to 
corporate data to employees when they 
are away from the office." 

Moreover, if CELF steering commit- 
tee member IBM Corp. has its way, 
CELF also will give some intelligence to 
network devices. "IBM wants individual 
embedded devices to touch the Internet 
and perform transactions, participate in 
Web services and do e-commerce," said 
Smyres. "The CE Linux Forum might 
help to kick-start an increase in enter- 
prise services" because of the availability 
of such clients. 

Smyres said that CELF and ELC 
members met at the Consumer Elec- 



tronics Show in Las Vegas in January to 
discuss possible synergies between the 
two organizations. "The jury is still out," 
he said on whether there is value for the 
CELF tree to comply with the ELC's 
API specs. "But we certainly want to 
leverage some of the work they did." 

According to Smyres, a greater 
degree of synergy may exist between 
CELF and the Open Source Develop- 
ment Labs (OSDL), which gathers 
major Linux users together in an effort 
to agree upon methods already in place 
and adopt them as standards. "OSDL 
was thinking about going into embed- 
ded, and consciously made the decision 
not to," he said, although some consider 
OSDL's Carrier Grade Linux (CGL) 
spec as a form of embedded Linux. "We 
are happy to cooperate, and there was an 
automatic bonding." 

"What OSDL is doing is much broad- 
er than the ELC," said Thomas Essebier, 
vice president of software engineering 
at SnapGear, also speaking of CGL. 
"They are talking about major sub- 
systems, security, reliability and logging. 
It's more along the lines of common cri- 
teria and good practices. There's nothing 
in there for cross-platform compatibility 
or portability." 

THOU SHALT NOT FRAGMENT LINUX 

More important than which deploy- 
ment method is selected is whether a 
method is selected. Victor Yodaiken, 
CEO and co-founder of real-time sys- 
tems developer FSM Labs Inc., 
believes that nonstandardization would 
be detrimental to an embedded Linux 
software ecosystem. 

"Market fragmentation is exception- 
ally dangerous," Yodaiken said. "Em- 
bedded Linux is either going to coa- 
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lesce around some reasonable stan- 
dard, or it's going to be crushed by pro- 
prietary systems because the expense 
of developing for multiple versions is 
too high." And Linux is attractive for 
the enterprise, Yodaiken said, as devel- 
opment of niche operating systems has 
become more costly over the years. 
"They want Linux so they can use the 
apps, and that's going to push them 
toward Linux that's really Linux," as 
opposed to a home-grown version of 
Linux that conforms to no convention, 
he said. 

Yodaiken, rather than illustrating 
the dangers of fragmentation with a 
parallel between Linux with Unix, per- 
haps more aptly compares embedded 
Linux to ITRON, an RTOS popular in 
Japan. "ITRON has a hundred differ- 
ent flavors and they're all incompati- 
ble," which he said has led to a total 
absence of a software market around 
that embedded system. "What you see 
is a lot of devices that use ITRON, all 
running handmade software particular 
to each device. You don't see the net- 
work effect for applications, which is 
appearing for Linux and Microsoft's 
operating systems." 

FSM is one of the nine remaining 
ELC members. "The standards work 
that we did serves to expand the mar- 
ket for third-party applications that run 
on embedded Linux. If you have a 
standard API, then applications ven- 
dors know that what they write will run 
on all varieties of embedded Linux." 
The alternative, he said, is a bunch of 
proprietary versions of Linux under 
which "people don't implement all of 
the system calls, don't meet perfor- 
mance requirements or just don't work 
right. The advantage of a standard is 



that if a customer asks if our real-time 
core will run on their board running 
embedded Linux using whatever pro- 
file, we know immediately whether or 
not our application runs." 

Wind River Systems Inc., which 
recently joined the Linux fray after years 
of deriding open-source development, 
maintains its stance that fragmentation 
is a danger. "Linux fragmentation will 
make the technology too expensive to 
deploy and to move from one CPU to 
another and keep compatibility at the 
API level," said Michel Genard, senior 
director of marketing at Wind River, 
which joined OSDL in December and 



CELF in January. 'We found that these 
two groups are driving Linux standard- 
ization in their markets." 

According to Hedrick, MontaVista 
believes that "the best way to keep Lin- 
ux all together is to focus on kernel.org 
and associated trees and the evolution of 
standard Linux. That's why we con- 
tribute with fixes and new technologies, 
in hopes they get adopted by the stan- 
dard Linux [source tree]. In a sense, 
Linus [Torvalds] is the ultimate stan- 
dards organization for Linux," he said of 
the Linux creator. 

But controlling the kernel is just the 
tip of the iceberg, asserted Genard. 



"Linux is more than a kernel, and I don't 
think that any serious developers will try 
to fork the kernel. The challenge is 
around everything else. Which compiler 
will you use? Which C library and pack- 
age will you include or exclude? You 
have a lot of options to make it a full 
operating system, and you have a risk of 
fragmentation if you don't define some 
group or industry boundaries." 

Despite having a product that is 
ELCPS-compliant, does MontaVista 
believe that the organization has become 
somewhat marginalized? "I would agree 
with that," said Joe Samagond, Mon- 
► continued on page 28 



OSDL: The Linux Center of Gravity 

Balance shifts toward open-source group, away from ELC 



BY EDWARD J. CORREIA 

Whether it's cosmic developer equilibri- 
um or just plain fate, the Embedded 
Linux Consortium (ELC) has been 
steadily shedding members while the 
Open Source Development Labs 
(OSDL) has been drawing them in. 

Following OSDL's most renowned 
human-resource acquisition, that of Lin- 
ux creator Linus Torvalds in June, it has 
added no less than a dozen notable 
industry executives and companies, 
including Novell, NTT and Wind Riv- 
er — 35 in all. Meanwhile, as of press 
time, the ELC had nine members, down 
from a peak of more than 100. 

Like the ELC's original intention in 
the embedded world, OSDL's mission is 
to accelerate the adoption of Linux in 
the enterprise. It is doing so by attract- 



ing key companies in major markets 
where Linux has gained traction, and 
getting everyone to agree on how best to 
advance Linux and develop applications 
so that no one has to reinvent the wheel. 
One such effort surrounds so-called 
Carrier Grade Linux and includes 
major telecom, datacom and Internet 
companies discussing how Linux can 
best serve the convergence of those 
three industries. According to Tim 
Witham, OSDL's lab director, the group 
will decide on the common pieces that 
need to be in Linux that are below the 
value line. "This is stuff that everybody 
needs to be successful, but there isn't 
any value to doing it differently [from 
each other], and in fact there's a detri- 
ment because there's no compatibility 
across [platforms]." 



The group in September 2003 re- 
leased Requirements Definition 2.0, 
which added sections on security and 
clustering for high availability to previ- 
ously specified sections on fault toler- 
ance and other areas. 

Like the ELC's Platform Specifica- 
tion, CGL draws heavily from specifi- 
cations that have come before, such as 
POSIX and the Linux Standard Rase. 
Rut Witham drew a clear distinction 
between OSDL's efforts and those of 
the ELC. "We're not developing APIs. 
OSDL does not dictate how things 
should be done. We define a list of 
things that need to be done." For 
example, rather than having 10 compa- 
nies creating program logs in 10 differ- 
ent ways, "we say, 'This one works, it's 
► continued on page 28 
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EMBEDDED LINUX 

< continued from page 27 

taVista's director of marketing. 
"We certainly don't see it as a 
standards organization per se. 
People don't come to us and say, 
'We'll buy your product if it's 
ELCPS compliant. "' The com- 
pany's CEO, Jim Ready, 



remains on the ELC board. 

While most former ELC 
members dropped out due to 
changes of the organization's 
charter, Wind River quit for 
other reasons. "The ELC tried 
to be too general and address 
all the needs of all developers," 
said Genard. "If a customer is 
designing a switch, router or 



set-top box, they have a good 
idea of the technology they 
need. There is value to group- 
ing people with the same inter- 
est, [and] customers we are 
looking for are application-cen- 
tric and need to understand 
what Linux is doing for them in 
their markets." 

Yodaiken did point out one 



possible advantage of nonstan- 
dardization. "If people adapt 
their applications to run on a 
particular device, it will be 
harder to move [those apps] to 
a competitor's device if the 
operating system is not the 
same." Such rivalry is precisely 
what happened to Japan's 
ITRON. I 



\J \rtar tn'\t miwjiv h"' wftn'tit* 

ift'lftoftftU-llt ttiOtsi 





1HOTO0L1 

[Jncunwrir Imojing <t.\ 4 
it MAC rtvtabjin 







IMIifcr W Bed Crp.1 
5*AwriplIoin 

kf ft 1*ff *Bt 



Of J t \*t 










■:i : ;• 



350 



.viftfUKUfziO'j \im Vn-.tm 



ti:aiTivtudi<i 

EEZD 



ltamiludm Tm Jovg 

%mm Eilifmn A 

b frill !<»*# 



i 






■ 






1:*D1C3 



1,07?, 



■•n^mi^Uk.ri.-i^ii^ 




HdhoMsId Olkr 

Tk Wiitr, VwJvd m tttk) h4hrik| 



Paradise Pkks 






I.' i n:n 
879. 



•?■ - 



Jl forth MM wlflhty|i!r 

■ 




- 



SBB. 



RTnjO Cnn*«l JUf»*K 10.0 
w jtrr m< himl.. c« n -i . ., \?*T v 



■J^ faln^m I film h-flnum Idlwa 
Fn-zckr I hrc£%# l 



n-Tititifr™ *5.1 



i, . 



• * 




t 



Psiniii ■ 
MR <>tt7 






960 



800-445-7899 • programmersparadise.toin 




DrrTrwk 5.6 



P:i. r;lil Di'iil ni 
KiSjoiS h-takta] 

i r r«hT.irjl 



i^tt-h 






T^^J*H.™»'«flUllP 



r u ci w 



''482.' 




Sn™ ONI irufa I. 

Cmpfln <o*«Jwn 

frf i«a JfHriiJ>r»rri 



- 



-nrriri 



•ft 



OSDL 



< continued from page 27 

interoperable and has a good 
chance of being adopted into 
the kernel.'" 

Another difference between 
OSDL and other consortia is 
the flexibility with which 
OSDL's specs are developed. 
"Many times you'll see a speci- 
fication that comes out and 
whether anybody implements a 
certain piece or not, that one 
piece is always there." Witham 
said OSDL specs and working 
group deliverables, on the oth- 
er hand, are built with three 
priority levels. "Priority one has 
to be something that is viable 
and can be implemented. Prior- 
ity two might need a little more 
work, and priority three [still] 
needs a lot of work and can fall 
off the bottom if nobody cares 
abovit it." 

The problem with other 
consortia, he said, is that they 
come up with a spec that has 
never actually been imple- 
mented. "And when somebody 
tries to implement it, they find 
that it doesn't work. If you get 
to API writing without code, it 
goes against how open-source 
[development] works. It takes 
you just as long to write that 
API spec as it does to write the 
piece of code that would imple- 
ment it. And if you write the 
code that implements it, you 
can work on it and see if your 
API actually does something." 

ATM OUT OF ORDER 

Witham illustrates the point 
with asynchronous transfer 
mode (ATM), a packetized WAN 
technology specification devel- 
oped by a consortium. "ATM 
has a 48-byte packet. Why? 
Recause half the people work- 
ing on the specification wanted 
32 bytes and the other half 
wanted 64 bytes. So the com- 
promise was 48 bytes." 

To avoid such debacles, 
Witham said OSDL would look 
at a working model first to see 
if it meets the group's basic 
requirements. "Priority one has 
to have a working example. 
And if a bunch of companies 
are trying it out, there's a much 
better chance that it will be 
what they need," he said, 
adding that not every company 
will have its own methods 
implemented, but if the meth- 
od that is implemented 
achieves its goal, the company 
doesn't have to spend money 
and developer resources main- 
taining that part of the code. I 
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EDITORIAL 

Rich Clients Go Mainstream 

Not long ago, the Web was focused on HTML, and 
the presentation of static or dynamic HTML, creat- 
ed by an app server, to be displayed by a fairly passive 
Web browser. All the heavy lifting would be done by 
server-side application servers running on ColdFusion, 
J2EE or ASP. The only client-side logic would be 
involved in basic presentation-layer processing, such as 
script-based input field verification, simple math and 
rendering/layout. 

We've moved past that era, which suffered from many 
shortcomings, including slow response time for interac- 
tive applications and the limitations of HTML-centric 
user interfaces. While many transaction-based Web activ- 
ities, such as buying books from Amazon.com or search- 
ing Google, are still HTML focused, increasingly Web 
applications are moving to a more graphical model based 
on Flash, Shockwave or Curl, or on those using Java or 
ActiveX applets. A number of other vendors are also mov- 
ing into this space, offering tools, host servers and client 
runtimes for highly graphical rich-client applications. 

The first applications to use Flash and ShockWave 
were games, animated short films and annoying "welcome 
movies" that drive Web surfers to frantically look for the 
"skip animation" buttons while simultaneously unplug- 
ging their computer speakers. Over the past several years, 
rich-client Web games have become much more complex 
and sophisticated, blazing the trail for less-noisy enter- 
prise applications. (Unfortunately, Web site welcome 
movies have become more sophisticated as well.) 

The business potential of rich-client applications goes 
far beyond the common tutorial and training animations. 
Systems management applications can use rich applica- 
tions for control panels and dashboards. Component ven- 
dors offer highly responsive data grid, graphics and report- 
ing packages. Indeed, a software-on-demand scenario, 
based on Web-downloadable rich-client applications, offers 
the potential to drastically alter the dynamic of Web-based 
applications, relegating standard HTML browsing to 
forms-based applications or simple transactions. 

While some competing rich-client systems use a pro- 
prietary runtime, others have chosen to leverage the free 
Flash player, in effect turning it into the de facto stan- 
dard. Other solutions, like Nexaweb's, are based on Java. 
That shows off one of the benefits of many rich-client 
platforms — they're cross-platform. 

Macromedia deserves credit for offering Flash clients 
for many operating systems and device formats, and 
opening the platform so that other server platforms, 
beyond its own, can talk to its clients. J2SE is, of course, 
also on many platforms, but the large size of the JVM, the 
often slow response time, and the utilitarian look and feel 
of its default 2D and 3D packages have limited its appeal 
for complex rich-client apps. 

Fortunately, unlike other runtime environments found 
in our industry, Flash and Java are not exclusionary. 
Because a desktop or notebook PC can host many run- 
times, and because those runtimes shouldn't interfere 
with each other, enterprise developers can choose a rich- 
client platform based on an individual application's needs, 
and bring Web development to a whole new level that 
combines the ubiquity of the Web with the ease of use of 
native applications. It's a powerful combination. I 



Anyone, including industry ana- 
lysts, that feels the march to 
India will continue unabated 
for very solid business reasons 
obviously discounts experience 
["Don't Deny Offshoring," Feb. 
1, page 27, or at www.sdtimes 
.com/cols/integrationwatch_095 
.htm]. To those people I sug- 
gest you look in the mirror and 
explain to the person looking 
back why he or she will contin- 
ue to be employed. What is 
happening in this field is a 
"race to the bottom" phenom- 
enon. Not because a practi- 
tioner is from India or China, 
but because we are moving 
highly technical jobs to areas 
of the world where there are 
no local mentors or local expe- 
rience base. 

I was not born knowing what 
I know now, and I did start close 
to the bottom of the ladder. 
However, throughout my career 
there have been people locally 
who could understand me and I 
them that could lead, advise, 
train and otherwise mentor me, 
as I do for others now. 

Projects that are being 
shipped overseas come back in 
the same time frame and in the 
same condition that they would 
if you staffed a local software 
engineering department with 
only junior programmers and 
let them loose on it. Add to that 



LETTERS TO THE EDITOR 

EXPERIENCE MATTERS 

the failures in communication. 
Reading a book does not "get it 
done," nor does taking a five- 
day class. What "gets it done" is 
experience. The individuals 
from India or China that have 
good experience are all over 
here, as that was the only 
avenue available years ago. This 
issue should not and cannot be 
couched in terms of ethnicity 
but rather experience. 

What I believe is happening 
to cause the unabated rush to 
offshore in the face of failure 
after failure is that there is no 
denying the monthly burn rate 
is lower in these countries. 
What is less apparent is time- 
to-market is substantially in- 
creased. Consequently, the 
total product costs are substan- 
tially higher. Since these costs 
get passed on to consumers, it 
does not appear directly in the 
quarterly earning reports. 

A further complication is 
that we are now seeing the same 
job-hopping in these other 
countries that had typified soft- 
ware in this country 20+ years 
ago. Where a domestic software 
engineer may not cross the 
street for $1,000, that same 
raise represents a substantial 
percentage increase in these 
offshore countries. It should be 
no surprise that once these 
junior software people get a 



OOPS, YOU DID IT AGAIN! 

As reader Grant Schultz rightly pointed out in his letter ["UML 
Not a Methodology," Feb. 1, page 24]...umm, UML is not a 
methodology. It is a language for describing software. Yet, in the 
same issue as that letter, your Data Watch survey asserts that 
more Asian software developers have mature development pro- 
cesses than their North American counterparts, as evidenced by 
their use of UML. This is a considerable leap of logic. Wouldn't 
it be more accurate to survey the number of Asian developers 
that have been rated at, say, CMM Level 3, or above? 

Jeremy Rasmussen 

Principal Engineer, CISSP 

Sypris Electronics LLC 
Editor's note: The information in the Data Watch is culled from 
the work of research firms, which create the questions for the 
surveys. 



PIRACY NOT ONLY ALTERNATIVE TO PAYING 

I think that Lisa Morgan was duped by the Business Software 
Alliance into regurgitating their propaganda ["Software Piracy: 
A Growing Problem," Jan. 15, page 19, or at www.sdtimes 
.com/news/094/speciall.htm]. The claim that $2 billion was lost 
to software piracy in the U.S. in 2002 rests on one critical, and 
completely false, assumption — namely, that everyone who used 
an unlicensed copy would have paid the full retail price for it 
had sufficiently strong anti-piracy measures been in effect. 

That is nonsense. Isn't it reasonable to assume that many 
users would turn to alternatives rather than pay? 

Mark B. Wallace 



year or even six months more 
experience, they can and will be 
lured away to the competition. 
Time-to-market therefore slips 
and product costs continue to 
rise further by virtue of the 
revolving training cycles. 

Will this practice continue? I 
fear the answer is truly yes. Will 
the effort cost consumers more 
in the end? Definitely, yes. 

Walt Corey 

I agree with everything that has 
been stated in the article. This 
makes sense in the short term 
for businesses. 

However, I feel the Ameri- 
can economy is going to be the 
biggest loser. 

People with the soft skills 
now will either have to become 
re-educated into another line of 
business or take jobs that don't 
pay what they are accustomed to. 
This puts the economic situation 
for everyone locally and globally 
in jeopardy. If companies don't 
look beyond the short term now, 
their existence may be in jeop- 
ardy, just like the employees who 
are in jeopardy of losing their 
jobs overseas. Americans are tire 
biggest consumers in the world, 
and if those consumers are no 
longer able to consume, then 
where does that leave die com- 
panies that are making use of die 
offshore work force? The com- 
panies go out of business and die 
offshore programmers are pre- 
sented with the same problem 
that we are experiencing now — 
unemployment. 

Paul Glover 

Does Andrew Binstock know 
the technology industry???? I 
especially like his comment 
about the new technologies: 

"But, in fact, most of today's 
celebrated technologies are the 
product of foreign programmers: 
Linux (Finland's Linus Torvalds, 
based on Minix written by Hol- 
land's Andrew Tanenbaum), C# 
(Denmark's Anders Hejlsberg) 
and, of course, the Web itself 
(England's Tim Berners-Lee)." 

In 20+ years of working in 
die technology industry, I have 
yet to see an offshoring project 
sent to Finland, Holland or 
Denmark. How many new tech- 
nologies have been planned, 
designed and developed in India 
and China? 

Questionable comments by 
this individual. 

Deborah Jackson 
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Andrew Binstock misses sever- 
al very important points in his 
column. 

First and most importantly, 
attempts to rewrite John Rush- 
kins basic law of business are 
failing and 100 years later are 
proving what he said: 

The Lowest Bidder: It is 
unwise to pay too much, but it is 
worse to pay too little. When you 
pay too much, you lose a little 
money... that is all. When you 
pay too little, you sometimes 
lose everything, because what 
you bought was incapable of 
doing what it was bought to do. 

Yes, a lot of coding, both 
grunt and "magic," has gone 
overseas principally for cost 
savings, but those cost savings 
have largely vaporized, not that 
they ever really existed in the 
first place. At present the met- 
ric of choice is a 25 percent- 
plus cost increase above the 
original contract for debugging, 
looking for hacker back doors, 
proper testing, etc., when send- 
ing work offshore. Woven into 
the hard technical binary of 
coding are the softer aspects of 
culture and of the population 
who has to use the software — 
how it interfaces with the user 
and how it responds to the 
user's commands. In case it has 
escaped Mr. Binstock's notice, 
other countries — India, et al. — 
are as different from American 
culture and its regionalization 
as Earth is different from the 
planet Mars. 

True, the problems with 
oflshoring software involve 
poor communication between 
here and there with a nearly 
13-hour time difference, man- 
agement cultural differences, 
issues with good technical pro- 
ject management and supervi- 
sory oversight. However, that 
does not lessen the failure of 
the responsibility of offshoring 
to work, and only serves to 
exacerbate its failings. 

Offshore QA workers, like 
their programmer brethren, are 
fine for bang-on-the-keyboard 
testing, but what of writing test 
scripts that are intelligent, flexi- 
ble and exercise the software 
like a user would in worst-case 
conditions? The same problem 
presents itself, with all the same 
outcomes. 

Mr. Binstock would like to 
point to the American program- 
mer and the exorbitant salaries 
being paid. In reality, American 
programmers are not getting the 
US$60,000 to $100,000 of a few 
years ago. The reality is today, 
American programmers are get- 



RAISE ABSTRACTION LEVEL 



Alan Fisher hits the nail right on the head in his 
Guest View ["Outsourcing No; Code Reuse, 
Yes," Jan. 1, page 26, or at www.sdtimes.com 
/opinions/guestview_093.htm]. Outsourcing as a 
trend, and traditional modeling methods as an 
approach, fail to provide a significant increase 
in productivity or agility of development 
departments. These methods simply do not 
change the approach we have in solving devel- 
opment-related problems. 

The last decades have shown us that the key 
to raising productivity and agility is raising die 
level of abstraction in which we solve problems. 
Current methods have not raised the level of 
abstraction beyond code concepts. UML, for 
example, is merely a visual representation of die 
code itself, which in most parts still needs to be 
produced manually. 

Emerging trends like domain-specific mod- 
eling aim to raise the level of abstraction to 
concepts that relate to a company's own prod- 
uct or application domain. A new generation of 
tools enables companies to define and imple- 
ment company-/product-specific modeling lan- 
guages and dedicated code generators. This 
allows developers to define product features in 
visual models that relate directly to their own 
product architecture and to use terminology 
that they are most familiar with. The combina- 



tion with a dedicated code generator, which 
reads the models and transforms them into 
code, allows that the actual production of full 
and efficiently written code is fully automated: 
While modeling with familiar concepts, the 
developers are actually producing high-quality 
and consistent code. 

This approach is especially valid for manu- 
facturers of software product families, like 
mobile handsets and car infotainment devices, 
not so much for one-time projects since repeti- 
tive development efforts will make it signifi- 
cantly easier to define modeling language and 
code generators. 

Traditional development methods force us to 
think and duplicate our solution in other 
domains — like that of die modeling language and 
the code — in our efforts to create the finished 
product. Domain-specific modeling takes the 
modeling language closer to the mindset of devel- 
opers by allowing them to model with the con- 
cepts they are most familiar with. It is not only the 
natural way, it is also the most productive and 
agile way to do it. 

Martijn Iseger 

Sales Manager 

MetaCase 
Editors note: MetaCase sells tools for creating 
and utilizing domain-specific models. 



ting between $40,000 and 
$80,000, while American QA 
workers get between $30,000 
and $60,000. Whose responsibil- 
ity is it that companies threw 
exorbitant salaries and perks at 
employees in an effort to keep 
them content and not wanting to 
jump somewhere else? When 
times turn lean, these same com- 
panies scream at the salaries they 
were/are paying. Treating people 
with dignity and respect, seem- 
ingly ever-more-rare commodi- 
ties, goes a long way in mitigating 
outrageous compensation pack- 
ages while making employees 
feel content and not wanting to 
jump somewhere else. 

Mr. Binstock points out that 
the issue of security is not an 
issue and if it becomes an issue, 
companies will "attend to it." 
This is an excuse to keep in 
mind when software companies 
are subpoenaed before Con- 
gress because an Osama bin 
Laden disciple infiltrated a for- 
eign outsourced programming 
shop and sabotaged critical 
infrastructure control software, 
or cryptographic software is 
compromised and we do not 
find out until some disaster 
instigated by buggy or broken 
software makes screaming 
headlines. Add to that a Pak- 
istani data entry clerk on an 
outsourced contract who 
threatened to breach the confi- 
dentiality of hundreds of 
patients' medical records of a 



California medical center if she 
did not get paid. 

Twenty-five years ago, the 
American economy ran on the 
automobile. One in seven jobs 
was tied directly to die automo- 
bile. Today the car has been 
replaced by information technol- 
ogy. When die technology jobs 
have mostly been given away and 
all those technology workers who 
retrained from other industries 
given away to other countries are 
now either unemployed or work- 
ing at some anonymous dead- 
end "Mcjob," who will be left to 
buy all those shiny new technol- 
ogy products? 

In summary, why does Mr. 
Binstock apologize for Ameri- 
can companies betraying this 
country, giving away the store, 
inventory and keys all for the 
sake of increasing an already 
exorbitant profit margin to their 
stockholders? This country is 
the greatest, most innovative, 
creative and focused country in 
the history of the world. Why 
are we letting it all slip through 
our fingers? 

Charisse Sebastian 

While I agree with Andrew Bin- 
stock that outsourcing is here to 
stay in one form or another and 
that it will adjust the salaries of 
programmers in the U.S., I 
believe his argument is faulty in 
a few areas and merely jumps on 
the bandwagon regarding the 
over-hype of this topic. 



For starters, the fact that 
technologies such as Linux and 
C# were developed offshore is 
an inappropriate comparison in 
this case, since the majority of 
systems development output in 
jeopardy of offshore migration 
relates to business applications, 
not foundational software. 
These business applications are 
in fact the source of the "magic" 
that Mr. Binstock dismisses and 
attributes to U.S. programmer's 
false sense of security. 

The "magic" does not stem 
from some type of nationalistic 
superiority, but from longstand- 
ing and well-earned relation- 
ships between firms' IT depart- 
ments and the lines of business 
they support, who have implicit 
understandings and thus can 
respond most efficiently This 
advantage would be enjoyed by 
the firm's native coders in any 
country, not just in the U.S., and 
compensates for the difference 
► continued on page 37 

WHAT DO YOU THINK? 

SD Times welcomes feedback. 
Letters should include the 
writer's name, company affili- 
ation and contact information. 
Letters become the property 
of BZ Media and may be edit- 
ed for space and style. 

Send your thoughts to 
feedback@bzmedia.com, or fax 
to +1-516-922-1822. Please 
mark all correspondence as 
Letters to the Editor. 
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"Everyone wants faster, better, cheaper. We thought they mighl 

appreciate smarter, too." Entering the integration market we 
hod three ad van rages: we knew the costs and hassles of 
traditional integration solutions were limiting their adoption, 
we saw that a standards -based service oriented architecture 
would salve these problems, and we had the world's most 
scalable enterprise messaging server, SonicMQ®, as a core 
technology. We combined SonicMQ's performance ond security 
with Web services, XML transformation, intelligent routing and 
a new cfistribuled deployment and management infrastructure 
to develop the world's first Enterprise Services Bus, Sonic ESB T 
With it businesses can easily integrate existing and future 
applications to create unprecedented business agility, 
and they can start today knowing they can scale to 
meet tomorrow's needs. We call it 



incremental integration. Irs smarter. 
It's also faster, better and cheaper 



sonic 
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Gonton Van Huizen. CTO 






www.sdtimes.com 



. Software Development Times . March 1, 2004 . 



COLUMNS 



33 



WORMING THEIR WAY TO THE HEART 



With the pandemic spread of the 
MyDoom virus in January, every 
IT department in the world is reminded 
anew that no site can ever consider 
itself immune from attack. This percep- 
tion would seem like no big deal. But if 
we spiral back 12 to 18 months, you 
might remember how some sites were 
forcibly closed down by viruses. Today, 
due to much greater awareness, compa- 
nies have invested wisely in software 
and hardware defenses to keep infra- 
structure safe and humming. But these 
defenses are inherently time-sensitive: 
They weaken as time passes if managers 
and developers do not stay abreast of 
what crackers are up to. 

With this in mind, SD Times and 
DevelopMentor presented a toe-curling 
Web seminar in January that featured 
Keith Brown, a security expert at train- 
ing firm DevelopMentor, showing the 
ease with which carelessness in code 
could allow him to stroll through a com- 
pany's databases. 

Within minutes he was into the site, 
searching for and finding the records he 
needed. He then had the site's Web 
server display a nicely formatted report 
of customer names, addresses and cred- 
it-card information. He employed a 



technique called SQL injection, in 
which he inserts his own SQL com- 
mands into the SQL strings the Web 
server sends to the database. This hack 
works because of a simple error: The 
Web site asks the user for his name. It 
then takes the user-entered name and 
concatenates a SQL select statement 
that fetches the user's data. 

By inserting malicious data, 
Brown demonstrated how he 
could change the SQL string to 
make the database do his bid- 
ding. First, he closed off the 
original statement with an 
escape character, then concate- 
nated his own request, and fin- 
ished that malicious code with 
a comment character so that ^^^™ 
anything that followed it (from the 
original programmer's SQL statement) 
was ignored. 

By deft probing of the information, 
he could quickly find out what other 
databases were hosted, what their con- 
tents were, and how to dump them in a 
formatted display. There were 170 
attendees at the Web seminar. At the 
end of the Q&A, not one had stirred. 
Like them, I was transfixed. Seeing a 
professional dismantle a site in minutes 
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makes your palms sweat and knots your 
tummy in unpleasant ways. 

Brown then demonstrated how to do 
similar things with C/C++ and .NET 
languages. In all cases, the problem and 
the solution were the same. The securi- 
ty hole was that unchecked user-entered 
data was driving program functionality. 
We all know that user data ultimately 
must drive program logic, but what we 
forget is that all user-supplied data must 
be viewed as hostile. It must be 
scanned and processed before it 
can direct logic flow. Brown 
wisely recommends that all data 
be verified via a regular-expres- 
sion engine that can check for 
escape characters and peculiar 
sequences. Once a data string 
passes this hurdle, the program 
can accept that it is handling 
true data, and then it can key off 
it. But not until then. 

There are subtle ramifications to 
this point. Suppose you post an app in 
which user selections are done by 
drop-down menus. Wouldn't you be 
safe because you've limited the choices 
a user can make? He can choose 
among only A, B or C. Nothing else, 
right? No. Suppose the cracker dials 
into your app without using a browser. 
Let's say he's just sending your server 
commands and requests via HTTP. He 



can send any menu pick he wants, and 
if you're not checking it before using 
this value, he can crash or control the 
app as he wishes. 

What should you do if the menu pick 
is invalid? Log it, along with the IP 
address and any known data about the 
user. Then return an error message. 
However, this error message should not 
be the one returned by the SQL server 
or the Java app server. That information 
tells the hacker too much: If he knows 
how to jigger SQL code, you're dead if 
he can direct feedback from the SQL 
engine. Bather, the message should say 
something like "Invalid menu pick, 
please try again." Definitely do not 
announce the specific problem. Error 
messages like "Part numbers cannot 
contain more than two letters" is much 
too informative. 

One reason developers like you and 
me don't automatically think about these 
things is because they did not exist in 
this form when we learned languages — 
that is, before last year. I've gone 
through the standard textbooks on C, 
C++, Java and Python. Not one has 
index entries for buffer over-run, securi- 
ty or hacking. I'm betting that soon this 
will no longer be so. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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STANDARD ISSUE 



I'd never attended a standards meeting 
before, so naturally I was struck by how 
stupid I was compared with everyone else 
in the room. Of course, that hardly distin- 
guishes the ECMA Working Groups for 
the standardization of C# and for C++ 
bindings for the CLI from, say, the early- 
bird-special crowd at Country Kitchen. 

That the meetings were being held in 
Kailua-Kona on the Big Island of Hawaii 
and that humuhumunukunukuapua'as 
were swimming by just a few hundred 
feet away did not help my ability to follow 
conversations that leapt instantly past the 
utility of a feature to issues of internation- 
alization and platform portability. Since 
standards are so important to SD Times 
readers yet relatively few will have a 
chance to attend a working session, I 
thought I'd share some of my impressions. 

Face time is a valuable commodity in 
a standards committee, as the challeng- 
ing aspects of standardization often 
require a good amount of context to be 
understood and heads nodding around a 
conference table can eliminate hours of 
painful word-smithing on an e-mail list. 

Indeed, there's a friendly agreement 
that specific technical discussions should 
not be reported, lest the already challeng- 
ing work be hampered by overcautious 
self-censorship, but I'm not breaking any 
confidences to report that C# is already 



dealing with "legacy code," and that 
C++/CLI is wrestling with the age-old 
relationships between a platform's integer 
and character sizes and Unicode, but with 
the new wrinkle that the CLI has its own 
standards that are platfonn independent. 

These standards groups are meeting 
approximately every six weeks, and in 
between meetings participants are 
charged with writing papers explicating 
die dozens of technical points 
raised in the meetings. The meet- 
ings ran for five very full days, 
with an additional two days for 
the CLI Working Group. 

The majority of the time was 
consumed in reviewing and 
approving edits made to the draft 
standards and tracking, assigning 
and consolidating papers that " 

have yet to be incorporated into the draft. 
According to Thomas Plum, host of the 
Kailua meetings, the first year of the C# 
and CLI standards were even more gruel- 
ing, with meetings every four weeks and a 
conference call in the middle. Standards 
work is not for those with a casual interest 
in the language. Nor, I was pleased to 
find, is it for those with an ax to grind. 

Microsoft naysayers like to paint an 
ogreish portrait of Microsoft's approach to 
standards, and I have to admit that I 




minded representatives of half-a-dozen 
companies' interests were arrayed around 
the table. But while there were points of 
contention, the discussion was striking in 
its collegiality and professionalism: At one 
point, a Microsoft representative aban- 
doned a line of argument the instant the 
point was made that the approach, while 
easy for Microsoft's implementation, 
would be challenging for those using a 
recursive-descent parser. 

The cynical will point out that 
Microsoft can afford to be generous — nei- 
ther working group is in die busi- 
ness of designing technology or 
commenting on the design of an 
existing language; tiiey are in die 
business of standardizing tech- 
nologies diat Microsoft brought 
to diem. In the case of C#, diis 
means that Microsoft's Anders 
Hejlsberg's design choices were a 
^_^_ guiding force in the room even 
though he did not attend, while in the 
case of C++/CLI, I would go so far as to 
say that the desire not to tread on the toes 
of the standard C++ community was an 
overriding theme. 

Having said that, Microsoft was also 
clear that it saw areas where it could pro- 
vide a better user experience than what 
could be captured in a standard, and that 
its implementation would provide those 
experiences; an obvious example might be 
syntax highlighting in an editor — not 



expected a bit of friction, given that quick- something that violates the standard, but 



something that affects buying decisions. 

Another surprise was that the groups 
were quite small — seven or eight in the 
C# group, fewer than a dozen in 
C++/CLI. In contrast, a meeting of the 
full standard C + + committee might 
involve 50 or 60 participants divided into 
a number of parallel working groups. 
That's a daunting prospect, given the 
amount of administrative overhead. 
Standards work is, after all, essentially 
bureaucratic in nature and although 
there's a collegial atmosphere, the work- 
ing groups follow formal procedures. 

Okay, so I'm going to break the rule 
and talk about one technical issue: In 
C++/CLI, there needs to be a distinction 
between allocating memory on the native 
heap and allocating a garbage-collected 
object on the CLI's managed heap. For 
native allocation, C++ uses the familiar 
keyword new, as in new Object. But 
what should be used for CLI allocation? 
My suggestion was that .NET objects be 
allocated with new improved Object. 
They didn't even take it for a vote. 

If you have a better idea, make your- 
self heard on the DOTNET-CX mailing 
list (discuss.develop.com/dotnet-cx.html), 
where the working groups are actively 
looking for community feedback. I 

Larry O'Brien is an independent tech- 
nology consultant and analyst, and the 
founding editor of Software Develop- 
ment Magazine. 
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THE UNIVERSAL IDE 



Eclipse has the potential to become 
the universal integrated develop- 
ment environment. I don't mean that in 
terms of beating up NetBeans. What I 
mean is that by letting go oi IBM's 
apron strings in early February and 
becoming a nonprofit organization, the 
Eclipse Foundation is in a much better 
position to push its open-source, open- 
standard IDE into prominence over all 
the other IDEs. 

Now that Eclipse doesn't have IBM 
hovering over it, I expect a lot more 
companies and developers will feel more 
comfortable donating time, effort and 
code to the project. 

It's not as if IBM won't be around; 
it will remain hugely influential within 
the project. According to Eclipse 
spokesperson Skip McGaughey, in an 
interview with SD Times, the total 
number of developers that IBM is 
committing will be going up, not down. 

But beyond IBM's involvement, 
Eclipse will really grow not because 
of new, outside developers. Novell, 
for example, has joined Eclipse, and 
the former NetWare, now Linux, giant 
is taking it very seriously. Chris 
Stone, Novell's vice chairman, said at 
LinuxWorld, "Eclipse fills that missing 
gap. We now endorse and support 
Eclipse as the integrated development 



that. 



environment of choice for all Novell 
products." 

If all that meant was NetWare, it 
wouldn't be a big deal, but Novell will 
be making Eclipse the linchpin of its 
Linux development tools as well. With 
broader support like this, Eclipse will 
improve at a rapid clip. 

Yet, there's more to it than 
Eclipse, like Microsoft's Com- 
mon Language Infrastructure 
(CLI), isn't just for one lan- 
guage. We're so used to talking 
about Eclipse in terms of Java 
development that we miss the 
point it was never meant to be 
just for Java. 

Eclipse is meant to be a uni- 
versal IDE. Besides the Java 
functionality we all know about, there's 
a C development tooling project and 
even COBOL and Smalltalk projects 
within Eclipse. Of them, the C project 
is the most mature. 

Since Novell badly needs C and C+ + 
development tools for its new Linux 
products, I think Novell, with its Ximi- 
an and SUSE programmers, will soon 
be leading the way to an Eclipse that 
will be useful for more than just Java 
developments. 

There are other efforts in the works 
to make a universal IDE. For example, 
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believe it or not, there are no fewer than 
three efforts afoot to launch an "open" 
version of .NET Shared Source CLI 
(SSCLI). These are Ximian's Mono, 
Corel's Botor and the Free Software 
Foundation's Portable .NET, and 
Microsoft itself is donating some work to 
these SSCLI efforts. 

The fatal flaw with those .NET ini- 
tiatives is that, historically, Microsoft 
changes its programming tools and 
interfaces for its advantage. All 
Microsoft need do is declare a 
new change or, as it did recent- 
ly, patent part of its XML im- 
plementation, and suddenly 
everyone who was following its 
lead closely is left miles away, 
frantically scurrying to adapt to 
that change. 

No, for a truly open system, 
one that has real growth poten- 
tial, you need real open-source that's not 
tied closely to any one company. In 
short, you need to do exactly what 
Eclipse did. 

With all this in mind, I hope that 
Sun will reconsider its position regard- 
ing Eclipse. 

Sun's open letter to Eclipse seemed 
to me to be just a restatement of 
its previous reasons lor not joining 
the organization. And some of it was 
just silly. Simply joining Eclipse would 
not mean that Sun would have to give 
up NetBeans. I mean, has Borland 



given up on JBuilder? Heck, it just 
expanded the line late last year to the 
Mac OS X environment. 

Sun and IBM do agree on one thing: 
The real problem for Java development 
isn't who's going to be the top IDE, it's 
going to be making sure that Java keeps 
up with Microsoft's .NET 

For developers, that may be the best 
possible result from both the further 
opening of Eclipse, and Eclipse and 
NetBeans competing with each other: 
the quick evolution of both platforms 
into unquestionably top-flight develop- 
ment environments. 

Like it or not, Microsoft's Visual 
Studio .NET has the advantage right 
now when it comes to getting other- 
wise equal programmers to become 
productive. One can argue until the 
cows come home over the technical or 
political advantages of Java over C# 
and Eclipse over NetBeans over Visual 
Studio .NET, but the bottom line is the 
development team that creates the 
most good code in the shortest time 
is the winner. 

Now, with Eclipse free of IBM, I 
think Eclipse has the most potential 
to become that top development 
environment. I 

Steven J. Vaughan-Nichols is editor of 
Practical Technology (www.practical- 
tech.com) and has worked as a program- 
mer for NASA and the Dept. of Defense. 
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WHAT PRICE PREVENTION? 



■* continued from page 31 

in labor rates to a great extent. According 
to much of the available literature, the 
firms that have succeeded in offshore 
outsourcing have done so in large part 
because of their adoption of quality prac- 
tices such as the CMM or six sigma by 
both buyer and seller, which allows for 
the efficient conveyance of requirements 
and testing criteria and reduction of mon- 
itoring costs for projects. Even with the 
benefit of these practices, true results 
have been a mixed bag. We cannot forget 
the undeniable food chain of ideas in the 
IT industry that starts with technical 
research and consulting firms and stems 
to industry periodicals, CIOs and ulti- 
mately to IT staff. If the punch line to the 
offshore success story is that firms need 
to adopt CMM practices and the like in 
order to achieve real savings, the afore- 
mentioned research and consulting firms 
in our industry who drive the hype stand 
to benefit most as they will undoubtedly 
incorporate this training into their service 
offerings if they haven't done so already. 
John Ricci 

CORRECTION 

Nick Garnett was the original architect 
on the team that developed the eCos 
operating system beginning in 1996. The 
creator was misidentified in a story in 
the Feb. 15 issue. 



Michael Lutz's recent Guest View 
["Code Analyzers: What's the Business 
Value?" Jan. 15, page 22, or at www 
.sdtimes.com/opinions/guestview_094 
.htm] raises a very important issue, one 
that lies at the core of the problems we 
face in the software industry: What val- 
ue do we place on error prevention? 

Modern static code analyzers are 
not designed to detect errors, but 
rather to prevent errors by warning 
developers about dangerous con- 
structs that can lead to errors. 

For an example of how static code 
analyzers provide value by preventing 
errors, consider the first warnings that 
Mr. Lutz received when he applied 
Code Wizard, Parasoft's C/C++ static 
code analyzer, to his own code — warn- 
ings about a few parameters where 
const might be used. Mr. Lutz ana- 
lyzed a relatively small piece of code 
(about 3,000 lines), but assume that 
this code is later extended to the point 
where many people are working on 
the code and no single person under- 
stands the entire piece of code. Then, 
if the members of the class are not 
explicitly constant, there is a possibili- 
ty that other developers will modify 
them. This can lead to an error that 
will have to be identified and 
removed, costing the team time, 
effort and money. 



For another example, consider the 
warnings Mr. Lutz received about 
classes with dynamically allocated 
memory that did not explicitly define a 
copy constructor or assignment opera- 
tor. If one of Mr. Lutz's colleagues takes 
over his code or tries to extend it, that 
developer might decide to use the class 
to create new objects. At that time, the 
developer is going to get a default copy 
constructor. Will this be the right copy 
constructor for this class? Maybe, or 
maybe not. This problem will not lead 
to memory corruption, but it can lead 
to a serious functional error when the 
code is writing to the same piece of 
memory. This could lead to a very infre- 
quently occurring error, which could 
take weeks to diagnose. 

I could go on and on with each vio- 
lation that CodeWizard reported. Yes, 
there is a great business value in this. 
Each time you prevent an error, you 
save yourself (and your team) the time, 
money and effort it would otherwise 
cost to chase and repair that error. Of 
course, prevention is not free. But is 
error prevention more economical than 
the industry's current strategy of trying 
to find and remove all the bugs in the 
code? I believe so. 

Adam Kolawa 

CEO 

Parasoft Corp. 



I enjoyed Michael Lutz's Guest View 
on static code analyzers. However, I 
fear he's lumping all static analysis 
tools in with the Parasoft tool he ana- 
lyzed and wrote about. There are 
many different types of static code 
analyzers, providing valuable, justifi- 
able utility. 

Parasoft's tool, apparently, is de- 
signed for bullet-proofing mission-criti- 
cal code — code that absolutely can't fail 
upon execvition. It provides the devel- 
oper with another way of reducing the 
risk associated with making code 
changes. 

Lexient's static analysis tool, on the 
other hand, provides code visualization, 
reverse documentation and other 
analysis mechanisms to benefit the 
development team that must rapidly 
become familiar with code in order to 
find where to make changes, and 
understand the impact of those 
changes. 

Each tool has utility in the right 
environment, otherwise they wouldn't 
sell. 

To ignore the benefits that static 
analysis tools offer is similar to not 
reading the next Gang of Four book, 
i.e., not taking advantage of a resource 
that can inform and benefit the reader. 
In the proper development environ- 
ments, static analysis tools have signifi- 
cant, tangible business value. 

Todd Green 
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TWO LINUXES, AND THAT'S OKAY 



The UnitedLinux effort — which 
brought together for a brief time 
four of the open-source operating-sys- 
tem vendors to work for a common dis- 
tribution and global support for users — 
apparently has been snuffed out by 
fractiousness among its members, most 
notably SUSE, now under Novell's own- 
ership, and SCO. 

Meanwhile, the Open Source Devel- 
opment Labs seems to be 
emerging as the Linux thought 
leaders, having brought in the 
creator, Linus Torvalds; kernel 
maintainer Andrew Morton; and 
former UnitedLinux general 
manager Paula Hunter. OSDL 
now is the overseer of the kernel, 
with its work on the 2.6 version 
just recently completed. 

Frankly, none of this matters — at least 
not since November, when billion-dollar 
Novell entered the open-source world 
with acquisitions of Ximian and SUSE. 
Novell has completely changed the rules 
of the open-source game. Now, a vendor 
used to doing business the old-fashioned 
way — selling proprietary software that 
locks users into its product sets and turns 
a profit — is going to apply the same rules 
to Linux. Whereas the motivation to cre- 
ate Linux was to offer a technology alter- 
native to the costly, tightly controlled 
Unix of the 1980s, Novell's motivation to 
drive Linux forward is to offer a business 
alternative to the costly, tightly con- 
trolled Windows of today. 

Novell will carry Linux into the enter- 
prise, and as it cobbles together a larger- 
software stack atop the operating system, 
it will finally be able to compete with 
Solaris and Windows. This is good for 
Linux as an enterprise platform, although 
it could result in two levels of Linux. 

As IBM and BEA did with Java 
before it, Novell will undoubtedly put its 
engineers to work extending the plat- 
form — not forking the kernel, mind you, 
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but adding enough proprietary "bells 
and whistles" features to be able to com- 
pete with the other two platforms. So, 
while the underlying "base distribution" 
might remain the same, essentially we 
will end up with two Linux operating 
systems — "enterprise" Linux and, for 
lack of a better word, "open" Linux. 

Currently, Morton maintains the 
source tree for the Linux kernel, with 
input from Torvalds and a tight 
group of programmers who con- 
trol what goes in and what doesn't 
go in to the operating system. 

I'm sure it won't be long 
before we hear that Novell is 
forming a "Linux Community 
Process" of some sort, bringing 
in other third-party open-source 
vendors to decide what is needed 
for an enterprise-ready version of the 
operating system. Novell talks about con- 
tributing to the open-source movement. 
I expect that will happen much in the 
same way IBM contributed to the open- 
source movement by creating the 
Eclipse project, which usurped the Net- 
Beans project at Sun. 

Will Novell's group work openly with 
Torvalds and OSDL? Will Novell hold 
back advances to the operating system 
until they first can be incorporated into 
Novell's products? Will the OSDL group 
be sympathetic to the needs of profit- 
seeking companies in terms of function- 
ality and faster version updates? 

Again, whether they do or they don't 
really doesn't matter. The market won't 
care. There will be users of the "open" 
Linux, and users of "enterprise" Linux. 
Some organizations might even use 
both. For smaller organizations looking 
to use the base Linux distribution for its 
servers, for example, without paying for 
the add-ins, service and support, there 
always will be the "open" version. For 
large enterprises that need a full soft- 
ware stack — database, middleware, pre- 



sentation layer — the "enterprise" ver- 
sion as envisioned by Novell, with Nov- 
ell standing behind it, will be the choice. 

This has been proven time and again. 
IBM customers want to know that its 
Java implementation will work with oth- 
er Java implementations, but they also 
have come to expect additional features 
that are not part of the J2EE specifica- 
tions adopted by the Java Community 
Process. The same is true with BEA cus- 
tomers, and Sun customers. 

Over and over, we hear from enter- 
prise development shops that they want 
one vendor to whom they can bring their 
problems if things go wrong. If the Nov- 
ell Linux product varies from the base 
distribution, vendors will appreciate the 
additional features as well as the ability 
to have "one throat to choke" if prob- 
lems arise, which is how Novell CEO 
Jack Messman put it in his keynote 
address to open New York's LinuxWorld 
Conference in January. 

This will create tremendous oppor- 
tunities for business integration ven- 
dors. Enterprise Linux customers 
employing the open-source stack above 
the operating system will have to be 
able to communicate and share data and 
files with Windows shops and with Java 
platform shops. 

So, what will be left are two distinct 
Linuxes: the original little OS that could, 
used by small, technology-centric shops; 
and the industrial-strength OS platform, 
led by Novell but certainly meeting Bed 
Hat in the enterprise. Users on either 
side probably won't be interested in 
whether or not the two "forks" even lose 
interoperability, since they rarely if ever 
play in each other's yards. 

That is, until the "enterprise" Linux 
effort completely subsumes the "open" 
effort, and the operating system that 
grew from the minds of free-thinking 
programmers becomes the operating 
system the next generation of free-think- 
ing programmers will rail against. I 

David Rubinstein is editor of SD Times. 



Is Your Company Planning to Employ 
A Grid Computing Strategy? 



DATA WATCH 



Tes. in plxencw 




Dai't knuvs 
ZB% 




■t&, wittun 

12 months 

/ 10% 



next 




// Y*i, Nitllill ' 

■— \jiMt I?- 24 months 
Z1% 

No 
3€> J A> 




Today's economic climate is causing many companies to examine their 
bottom line with microscopic scrutiny. One way to squeeze more from 
existing hardware is by deploying a hardware grid. In the fall of 2003, 
Evans Data Corp. surveyed 410 enterprise developers to find out if grid 
computing was on their to-do list. 

Though not a new concept, grid computing is finding new popularity 
and is available in various forms from major vendors, including IBM, Ora- 
cle and Sun. In essence, the technology spreads computing power, appli- 
cations and data storage across multiple systems in an enterprise and 
taps into the underused computing power of those systems during idle 
times. 

While only about 1 in 20 enterprise programmers said they currently 
deploy grid technology, responses indicate that within two years, that 
number will grow to about 35 percent. 
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Sun Microsystems Inc. is welcoming co-founder and 
former vice president of technology Andy Bechtol- 
sheim back into the fold. The technology giant 
announced it will acquire Kealia Inc., which Bech- 
tolsheim co-founded to develop server technology, in 
a stock-swap deal. No value was given for the deal. 
After the deal closes some time during the third or 
fourth quarter, Kealia will become the Advanced Sys- 
tems Technology group within Sun's Volume Systems 
Products group. At Sun from 1984 to 1995, Bechtol- 
sheim held various roles, including chief architect of 
Sun's workstation product line. "It is great to have 
Andy back home at Sun," said Scott McNealy, Sun's 
CEO. "We started the company together while we 
were at Stanford University over 20 years ago, and 
both of us could not be more excited about working 
together again." Bechtolsheim said, "We will see 
some of the biggest innovations in servers over the 
next few years, and I look forward to working with 
Sun to deliver this vision to the market" . . . Oblix 
Inc., a developer of identity-based security solu- 
tions, will acguire Web services management compa- 
ny Confluent Software Inc. "The move from identi- 
ty and access management to Web services security 
and management is a natural evolution for Oblix that 
meets the needs of our customers," said Oblix CEO 
Gordon Eubanks. Oblix said it will continue to support 
all of Confluent's products, which already have been 
integrated with Oblix products . . . Compuware 
Corp. has entered into an agreement to acguire Cov- 
isint LLC, a company that makes software to con- 
nect the worldwide automotive industry, the compa- 
nies announced. I 
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To learn more about our tools and how rheij can significantly impact i|our bottom-line uisir 

us online at ujiuui.deueKpress.com 

Productivity Tools 

CodeRusb is a powerful editor add-^n for Visual SludJo® .NET Crease more code with fewer 
Keystrokes, see complex software with clarity, and design forms with ease. Say goodbye to 

^ drudgery and get ready to become tjhe programming superhero that yon always know you 

t could be- 
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Reporting 



A comprehensive roporimc p-'aiform for Windows® and the Web, Xtrafloports is fully mtcgra-od 
Into the Visual Studio® .NET IDE and sets the standard Tot easc-af-uso end flexibility. "iV th 
XtraReports, you nover have to cringe at the Jhptight of having to de*»gn a report agem! 



Visual Components 



To bultd stunning and f a* ota applications, you need feature compfete components... Ones thai 
wonV as expected, each and every time. Our complete range of visual components will help you 
emulate today's most popular Ills wtltiou! hassles or aggravation. L-ke all of our tools, our 
components were written in Visual C* 11 * and fully ophmized for the -NET Framework and sl| 
NET languages- 
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'. Apptication Development Framework 

xpd represents a powerful bridge between the true object world and relational databases, tl 
gives developers the freedom to build true business objects without having to deal with the 
tedious complexifies of mapping them onto individual database tables. 




I~l icrasopr . UisLal 3tudiQ.NET, Uindotus, and Uisual G = are either registered 

rrarJemafhs or rrademarks of Mcmsufi Corporation in rhe United States and/or other countries. 
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Fefltumg Micidw: Visual 5r-jd>3.Ntt TecfmcWgy 







server 



desktop 






tablet pc 



web 



mobile 



Sign up today for our 
free developer resources 
focusing on; 

Windows- 1 Installer 
.NET Framework 
Mobile device projects 
Web services 
Smart device installations 

ntlp:// resoLjrces T w3se,com 

CSCGiVL'W hum. Al H^rti nmmumi 



The Wise install does it all. 

Wfae is the industry's best, most comprehensive ,MSI and .NET 
installation authoring solution. From simple desktop mslallalions. 
Id sophisticated server-based deployments, to (he latest application 
installations for mobile devices f you can easily create reliable 
installations lhat install error-free, even/ time. With VWse, 
one installation loot does it all. 



Download your free evaluation at 
htlp: //evolu crrions . wi se.com 



Wise 



